6_stats\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000200)=""/245, 0xf5}], 0x2, 0x0, 0x0) io_uring_enter(r3, 0x5384, 0x20be, 0x3, &(0x7f0000000140)={[0x3f3]}, 0x8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5618, 0xdfef, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) [ 134.675732][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 134.716484][T14214] loop3: p2 p4 [ 134.720125][T14214] FAULT_INJECTION: forcing a failure. 01:33:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x5, 0x28200) r1 = syz_io_uring_setup(0x806ec1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x77, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x17, 0x0, {0x0, r5}}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000140)=0x4) io_uring_enter(r1, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 134.720125][T14214] name failslab, interval 1, probability 0, space 0, times 0 [ 134.732880][T14214] CPU: 1 PID: 14214 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 134.741637][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.751695][T14214] Call Trace: [ 134.755043][T14214] dump_stack+0x137/0x19d [ 134.759385][T14214] should_fail+0x23c/0x250 [ 134.763806][T14214] __should_failslab+0x81/0x90 [ 134.768577][T14214] ? kobject_uevent_env+0x1a7/0xc40 [ 134.774003][T14214] should_failslab+0x5/0x20 [ 134.778561][T14214] kmem_cache_alloc_trace+0x49/0x320 [ 134.783829][T14214] ? vprintk_emit+0x17e/0x3d0 [ 134.788486][T14214] ? dev_uevent_filter+0x70/0x70 [ 134.793474][T14214] kobject_uevent_env+0x1a7/0xc40 [ 134.798474][T14214] ? vprintk_default+0x22/0x30 [ 134.803213][T14214] ? vprintk_func+0x137/0x140 [ 134.807876][T14214] ? __list_add_valid+0x28/0x90 [ 134.812863][T14214] ? free_unref_page_commit+0xa9/0x100 [ 134.818299][T14214] kobject_uevent+0x18/0x20 [ 134.823066][T14214] blk_add_partitions+0x43f/0xa80 [ 134.828274][T14214] bdev_disk_changed+0x1a7/0x200 [ 134.833318][T14214] loop_set_status+0x75f/0x7e0 [ 134.838532][T14214] lo_ioctl+0x758/0x11f0 [ 134.842770][T14214] ? path_openat+0x19ab/0x20b0 [ 134.847517][T14214] ? putname+0xa5/0xc0 [ 134.851605][T14214] ? ___cache_free+0x3c/0x300 [ 134.856358][T14214] ? blkdev_common_ioctl+0x9c3/0x1010 [ 134.861752][T14214] ? selinux_file_ioctl+0x8e0/0x970 [ 134.866999][T14214] ? lo_release+0x120/0x120 [ 134.871480][T14214] blkdev_ioctl+0x1d0/0x3c0 [ 134.875999][T14214] block_ioctl+0x6d/0x80 [ 134.880235][T14214] ? blkdev_iopoll+0x70/0x70 [ 134.884801][T14214] __se_sys_ioctl+0xcb/0x140 [ 134.889366][T14214] __x64_sys_ioctl+0x3f/0x50 [ 134.894011][T14214] do_syscall_64+0x34/0x50 [ 134.898494][T14214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.904467][T14214] RIP: 0033:0x466217 [ 134.908338][T14214] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.927922][T14214] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 134.936311][T14214] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 134.944394][T14214] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 134.952363][T14214] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 134.960571][T14214] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 134.968604][T14214] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:32 executing program 5: syz_read_part_table(0x68, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:32 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x82b40000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 134.976606][T14214] loop3: p2 size 327680 extends beyond EOD, truncated [ 134.983588][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 134.985204][T14214] loop3: p4 size 2097152 extends beyond EOD, truncated [ 134.999739][ T1028] loop1: p2 p4 [ 135.003307][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 135.020187][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 135.028638][T14218] loop1: p2 p4 [ 135.029218][T14262] loop5: detected capacity change from 0 to 1 [ 135.032162][T14218] loop1: p2 size 327680 extends beyond EOD, truncated [ 135.042296][T14218] loop1: p4 size 2097152 extends beyond EOD, truncated [ 135.076661][T14262] loop5: p2 p4 [ 135.084266][T14262] loop5: p2 size 327680 extends beyond EOD, truncated [ 135.091939][T14262] loop5: p4 size 2097152 extends beyond EOD, truncated [ 135.127077][T14218] loop1: detected capacity change from 0 to 1 [ 135.133360][T14262] loop5: detected capacity change from 0 to 1 [ 135.141218][T14295] loop0: detected capacity change from 0 to 264192 [ 135.150139][T14295] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 135.166366][ T1028] loop1: p2 p4 [ 135.169938][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:33 executing program 1: syz_read_part_table(0x300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:33 executing program 3 (fault-call:0 fault-nth:48): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffffffff, 0x17, 0x0, {0x0, r8}}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000380)={0x1, 0xa8, "5491ab54495f38a695595834699666ba4572bd715dcca7f10ddc564761dc402428487337ff945aa4f48539933b2414f4c94976a5cc295afb6dc80918a3bbc394439853d28b2243968531ae22236958579971ee7828baa16476f5669b4eb13a1af1b111c31309cae25af5394dcc232e68c3d6d56f3292189a59c0cc5a1945b977704f764b1c9b9cab1ece6779067c27ec6b3b127937c6f746cb2b409f3bb5d43bb1215d34db4ffe03"}) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:33 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:33 executing program 5: syz_read_part_table(0x6c, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 135.177196][T14262] loop5: p2 p4 [ 135.180713][T14262] loop5: p2 size 327680 extends beyond EOD, truncated [ 135.189715][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 135.196728][T14262] loop5: p4 size 2097152 extends beyond EOD, truncated [ 135.204294][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 135.213502][T14218] loop1: p2 p4 [ 135.220711][T14218] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x101, 0x0, 0x1, 0x1, 0x1}, 0x8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40040, 0x0) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e21, 0x40, @local, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="d964193c7dccdb684639a6f5f8570cf84f1640af84e62adc744c100d42dec47cb49d25e985dcbfc7cdc899bafe28598bec460dd4bcfc7804bf028f7f3783299b0cc264e0837faea041d09dd1730fa150819d3786f87b952f3310fd34312af425ec80190f602225d6de769b6cc828ae1e2c76217b54a519916abe2823f5633f44d2a0c188bfa61021430c11d703e160b84b920ab07adf75957ed0b528d4dace7034e37a2f67c9969d2c4c6c87d6d8eb04ebf1c9e27016", 0xb6}, {&(0x7f00000002c0)="d3d076bc220dc24c73c60a0f4c266816122c92c4308846c4780a958641c5839d5cecb89bd5678c6dc8d055aa3687d57202506babcb21813e9506a452f24a79b63bb7133f7e550376446747d73a9283ff1165702d6f7ad584ac32dd811ad8cf29d3c7647815", 0x65}, {&(0x7f0000000340)="ed6e656d2d3bbb87c9956f46e8731ed4e907bc503f2231843f266561ef3635e233a7ea14e024c177f70223d9dc78aed59ffe89f57849f816e69cc72c6e7d6a599a40f2498cbe2d83059b2077c7b025d40fa38367b8bc97c5569e560d2c9fa484c7c5d2b66e96cba22ed131edd8bd357d1f6ce4b6276ae7f6b33fa3ef9e3b2084a5ac506af150c40ccaec50c480f99dd7aee9f7575434d2afa584327f1da317458b2d7fb7abc89b1699af2074c08b80788d221ba0d333757f52f6", 0xba}, {&(0x7f0000000400)="6e2945dae8", 0x5}], 0x4, &(0x7f0000000480)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, [], [@pad1, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7e}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x32, 0x9, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x9, [0xff, 0x0, 0x4e775fd3, 0x9, 0x0]}}, @generic={0x1a, 0xd, "c08cce9eba68d0b00d7f794dc5"}, @pad1, @ra={0x5, 0x2, 0xff}]}}}], 0xb8}, 0x4000050) [ 135.230050][T14218] loop1: p4 size 2097152 extends beyond EOD, truncated [ 135.251933][T14320] loop3: detected capacity change from 0 to 1 [ 135.270306][T14329] loop0: detected capacity change from 0 to 264192 [ 135.281763][T14329] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 135.296481][T14320] loop3: p2 p4 [ 135.300105][T14320] FAULT_INJECTION: forcing a failure. [ 135.300105][T14320] name failslab, interval 1, probability 0, space 0, times 0 [ 135.305762][T14337] loop5: detected capacity change from 0 to 1 [ 135.312740][T14320] CPU: 1 PID: 14320 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 135.327501][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.337543][T14320] Call Trace: [ 135.340817][T14320] dump_stack+0x137/0x19d [ 135.345133][T14320] should_fail+0x23c/0x250 [ 135.349529][T14320] __should_failslab+0x81/0x90 [ 135.354272][T14320] should_failslab+0x5/0x20 [ 135.358759][T14320] kmem_cache_alloc_node+0x56/0x2f0 [ 135.363938][T14320] ? __alloc_skb+0xed/0x420 [ 135.368431][T14320] __alloc_skb+0xed/0x420 [ 135.372745][T14320] alloc_uevent_skb+0x5b/0x120 [ 135.377591][T14320] kobject_uevent_env+0x863/0xc40 [ 135.382661][T14320] ? vprintk_func+0x137/0x140 [ 135.387377][T14320] ? __list_add_valid+0x28/0x90 [ 135.392261][T14320] ? free_unref_page_commit+0xa9/0x100 [ 135.397710][T14320] kobject_uevent+0x18/0x20 [ 135.402240][T14320] blk_add_partitions+0x43f/0xa80 [ 135.407249][T14320] bdev_disk_changed+0x1a7/0x200 [ 135.412228][T14320] loop_set_status+0x75f/0x7e0 [ 135.416984][T14320] lo_ioctl+0x758/0x11f0 [ 135.421207][T14320] ? path_openat+0x19ab/0x20b0 [ 135.425954][T14320] ? putname+0xa5/0xc0 [ 135.430188][T14320] ? ___cache_free+0x3c/0x300 [ 135.434844][T14320] ? blkdev_common_ioctl+0x9c3/0x1010 [ 135.440211][T14320] ? selinux_file_ioctl+0x8e0/0x970 [ 135.445410][T14320] ? lo_release+0x120/0x120 [ 135.449943][T14320] blkdev_ioctl+0x1d0/0x3c0 [ 135.454455][T14320] block_ioctl+0x6d/0x80 [ 135.458758][T14320] ? blkdev_iopoll+0x70/0x70 [ 135.463326][T14320] __se_sys_ioctl+0xcb/0x140 [ 135.467895][T14320] __x64_sys_ioctl+0x3f/0x50 [ 135.472464][T14320] do_syscall_64+0x34/0x50 [ 135.476895][T14320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.482781][T14320] RIP: 0033:0x466217 [ 135.486652][T14320] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.506246][T14320] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 135.514744][T14320] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 135.524703][T14320] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:33 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80, 0x0, r0}) io_uring_enter(r3, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 135.532650][T14320] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.540773][T14320] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 135.548735][T14320] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x801f}, {r0, 0x2}], 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x6ab3]}, 0x8) [ 135.578524][T14320] loop3: p2 size 327680 extends beyond EOD, truncated [ 135.596339][T14337] loop5: p2 p4 [ 135.599982][T14337] loop5: p2 size 327680 extends beyond EOD, truncated [ 135.610833][T14320] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:33 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x4}}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x1e68, &(0x7f0000000080)={0x0, 0x2000000, 0x4, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_io_uring_setup(0x3e9c, &(0x7f0000000240)={0x0, 0x7622, 0x10, 0x0, 0x193, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x32c1, &(0x7f0000000140)={0x0, 0xaa3c, 0x4, 0x3, 0xc2, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 01:33:33 executing program 3 (fault-call:0 fault-nth:49): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 135.628203][T14355] loop1: detected capacity change from 0 to 1 [ 135.641930][T14337] loop5: p4 size 2097152 extends beyond EOD, truncated [ 135.649380][ T1028] loop3: p2 p4 [ 135.652906][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 135.664097][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 135.667655][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 135.692084][T14355] loop1: p2 p4 [ 135.698568][T14355] loop1: p2 size 327680 extends beyond EOD, truncated [ 135.715028][T14337] loop5: detected capacity change from 0 to 1 [ 135.721277][T14355] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x4, 0x9, &(0x7f0000000740)=[{&(0x7f0000000040)="b4ff53415b56b0f9d0e8bd322818770df1b2a70e134a2af512296a294e5a1d814bb8f18c60472d47d49d7a721709f03dd1ec159f967b7ce9a3a92dd43a2ce6906df9de4f25b9baa99a13a3a8cdac377899cdf6105478d88a472adc188ce38623e4710a0e157a70121e90904d7bd441461bc6eeb97aa56c101727483ad4563587869e8f877ee75e71944f58213856002520b5dc", 0x93}, {&(0x7f0000000200)="8b7233da0d750f87afaf5062064d82560d8a89ddd1e01ffdb83ac803b0455267bec926677de2457920061c14065dcf7162f7b235a02233c76f97dcaae7bedde0fe5d8dccb7893ff17350a4d32f48d8c39454f1a30cd0a5fb145af969d0", 0x5d}, {&(0x7f0000000280)="14fd40d241a65b09518922ef5916c33c014bc9c9ffa673a02e94b11ca17d67edab07f3a88748ee29ad0a75ac7dfe735bd1b4bdb352901789f4d6efd8f0ff67153d44a603018f224553bc0822e20dd1c8112843190b4337cb4020360c19c4c8f809ad8b6e81516582068ffe3d05cf18264dcf78a2bcbda8163dcd0a707f7ea2edf50b3df37342413c43620d1e", 0x8c}, {&(0x7f0000000340)="7eb648bff98a7865cd5f25ac1121eb75bc7ad2e10316eb2007b0d5558d9686ab55e2912e2654643cf69821c5a60bbc82aec2f1347f72de6a146a32dbd44cfbf30246e6f4bee0366619d1ef1d94f354f5629db1b379074b4e680ba89b00cf3cad5aeaa302c908cf5c139040e9d75aaa4a7e05bbd5a07ef1870e012e7ebf2ed8d0c5feb314e17bb0ab1ac275f5928b59417661d7fca0f283e886f2cebebacce0de012abcc2988f941944eb3099f126", 0xae}, {&(0x7f0000000400)="8b53adec227ad3f6085009cd1c5c28e4289d1d61251ff6333f11e3c898be00755772c47bb24e97065ff51f8a4e741a78f2d99648a1a96adc90f741a54c181a421c60f9e2cb0a17c5978986fcfddfc6cf35caa9b8668a4c3179144e22be5647", 0x5f}, {&(0x7f0000000480)="f2eccec4a44b5ecc1e8a6047a5306515e585ace498588049a24b9eebfe84e02abc0a3fe147c31a7d93cfb42137f2c0e181c5cdeeb3ab5a86f8c98ec7a160135d0e3df8b58c9ba1588ead1c713b54d331010c9b3fa24e8e2b5d", 0x59}, {&(0x7f0000000500)="9938cc1e7d0f3f17570bc3e1a3f024dd0058088e98a6809eef4049ca322e04803f8e8f251b91c4c12acc21df89fcef5bcba36e130c9cc2264b571ecf78a578aac0dc5eb7887921cf858d958f04c939ff8199b47cf7b9bcc875e75002badaaa4be93de268705f08812848bc61003ddf5cfa02c0213bc32125eec59a1012c007b562c680e6821d918fd317e705a4bea3c073ebf7d9134c73e3930b9b876177fc65f40314dbcdaa4888cfa0ee823731308f1f5953ab72fd300590e56c95d9384e2940aeddf08467d611669ee87f87a71ab6114c5359cd78c8e7f7859125ed124d560f2cfdfed5f5080e2af6", 0xea}, {&(0x7f0000000600)="b9963c4657a9d25798b55e82ebc04e6aaf98922db626b43418f8bc475224e3b9f4fd85407ccafa44d2747b0eef2d8887afaca68bc3493d0e0b85eab25973249f7f2af883867483e4fbc82adbfbbb3e747c50e5bd6855228d13e8118f5600b9cf48e22504ab80608191497ee216ce7e665f73837d8754891c76ab44d67716cfc1e8b37a11e7f0f64aec0fb39beabdb2f38c9621d25bdabcc12d470aace19359cbdea1e6b68c", 0xa5}, {&(0x7f00000006c0)="11b1abd4be4881f7ca7ca920fe3fa5c536c646d99b5ca5547ed324491da1313df3c93fbc0eb1d14bd0ef300576cb1826254bc70bf0da8b1f27ad69a132887339251040eef7962a24d4c035f92dad4d3b9982dfad8e0f1721ebf2132644f7a7b63b7f5440a40b5c8b630fde67aeb19bbe255d59aae1b8dfd8cbf63ec293cc", 0x7e}], 0x9, 0x8, 0x1, {0x1, r8}}, 0x6) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 135.731077][T14399] loop3: detected capacity change from 0 to 1 [ 135.746379][T14337] loop5: p2 p4 [ 135.750017][T14337] loop5: p2 size 327680 extends beyond EOD, truncated [ 135.763012][T14399] loop3: p2 p4 [ 135.766795][T14399] FAULT_INJECTION: forcing a failure. [ 135.766795][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 135.779425][T14399] CPU: 0 PID: 14399 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 135.788236][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.796619][T14355] loop1: detected capacity change from 0 to 1 [ 135.798289][T14399] Call Trace: [ 135.798297][T14399] dump_stack+0x137/0x19d [ 135.812035][T14399] should_fail+0x23c/0x250 [ 135.816467][T14399] __should_failslab+0x81/0x90 [ 135.821249][T14399] should_failslab+0x5/0x20 [ 135.825747][T14399] kmem_cache_alloc_node+0x56/0x2f0 [ 135.830537][T14414] loop0: detected capacity change from 0 to 264192 [ 135.830944][T14399] ? __alloc_skb+0xed/0x420 [ 135.830964][T14399] ? kcsan_setup_watchpoint+0x26e/0x470 [ 135.847481][T14399] __alloc_skb+0xed/0x420 [ 135.851880][T14399] alloc_uevent_skb+0x5b/0x120 [ 135.856627][T14399] kobject_uevent_env+0x863/0xc40 [ 135.861721][T14399] ? vprintk_func+0x137/0x140 [ 135.866382][T14399] ? __list_add_valid+0x28/0x90 [ 135.871209][T14399] ? free_unref_page_commit+0xa9/0x100 [ 135.876716][T14399] kobject_uevent+0x18/0x20 [ 135.881288][T14399] blk_add_partitions+0x43f/0xa80 [ 135.886293][T14399] bdev_disk_changed+0x1a7/0x200 [ 135.893263][T14399] loop_set_status+0x75f/0x7e0 [ 135.898011][T14399] lo_ioctl+0x758/0x11f0 [ 135.902253][T14399] ? path_openat+0x19ab/0x20b0 [ 135.907087][T14399] ? putname+0xa5/0xc0 [ 135.911135][T14399] ? ___cache_free+0x3c/0x300 [ 135.915789][T14399] ? blkdev_common_ioctl+0x9c3/0x1010 [ 135.921145][T14399] ? selinux_file_ioctl+0x8e0/0x970 [ 135.926344][T14399] ? lo_release+0x120/0x120 [ 135.930875][T14399] blkdev_ioctl+0x1d0/0x3c0 [ 135.935427][T14399] block_ioctl+0x6d/0x80 [ 135.939655][T14399] ? blkdev_iopoll+0x70/0x70 [ 135.944255][T14399] __se_sys_ioctl+0xcb/0x140 [ 135.948839][T14399] __x64_sys_ioctl+0x3f/0x50 [ 135.953477][T14399] do_syscall_64+0x34/0x50 [ 135.957888][T14399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.963766][T14399] RIP: 0033:0x466217 [ 135.967638][T14399] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.987223][T14399] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 135.995630][T14399] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 136.003666][T14399] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 136.011617][T14399] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 136.019693][T14399] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 01:33:33 executing program 1: syz_read_part_table(0x402, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:33 executing program 2: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = syz_io_uring_setup(0x66c1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:33 executing program 5: syz_read_part_table(0x74, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 136.027695][T14399] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 136.048610][T14337] loop5: p4 size 2097152 extends beyond EOD, truncated [ 136.056513][T14399] loop3: p2 size 327680 extends beyond EOD, truncated [ 136.063842][T14414] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 136.064476][T14399] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:33 executing program 3 (fault-call:0 fault-nth:50): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:33 executing program 2: rt_sigprocmask(0x1, &(0x7f0000000040)={[0x4]}, &(0x7f0000000140), 0x8) r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000440)={r3, r4+60000000}, 0x8) syz_io_uring_setup(0x630a, &(0x7f0000000300)={0x0, 0x1000000, 0x1}, &(0x7f00003b2000/0x1000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r7 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r10}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 136.136716][ T1028] loop5: p2 p4 [ 136.140474][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 136.152414][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 136.160367][T14448] loop1: detected capacity change from 0 to 2 [ 136.186291][T14448] loop1: p2 p4 [ 136.189884][T14448] loop1: p2 size 327680 extends beyond EOD, truncated [ 136.191573][T14453] loop3: detected capacity change from 0 to 1 [ 136.203446][T14448] loop1: p4 size 2097152 extends beyond EOD, truncated [ 136.219572][T14456] loop5: detected capacity change from 0 to 1 [ 136.227367][ T1028] loop1: p2 p4 [ 136.230887][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 136.248403][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 136.256581][T14453] loop3: p2 p4 [ 136.260106][T14453] FAULT_INJECTION: forcing a failure. [ 136.260106][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 136.272736][T14453] CPU: 0 PID: 14453 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 136.281497][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.291551][T14453] Call Trace: [ 136.294823][T14453] dump_stack+0x137/0x19d [ 136.299146][T14453] should_fail+0x23c/0x250 [ 136.303653][T14453] __should_failslab+0x81/0x90 [ 136.308511][T14453] should_failslab+0x5/0x20 [ 136.313027][T14453] kmem_cache_alloc_node_trace+0x59/0x300 [ 136.318803][T14453] ? __kmalloc_node_track_caller+0x30/0x40 [ 136.324614][T14453] __kmalloc_node_track_caller+0x30/0x40 [ 136.330310][T14453] ? alloc_uevent_skb+0x5b/0x120 [ 136.335305][T14453] __alloc_skb+0x187/0x420 [ 136.339719][T14453] alloc_uevent_skb+0x5b/0x120 [ 136.344477][T14453] kobject_uevent_env+0x863/0xc40 [ 136.349507][T14453] ? vprintk_func+0x137/0x140 [ 136.354242][T14453] ? __list_add_valid+0x28/0x90 [ 136.359100][T14453] ? free_unref_page_commit+0xa9/0x100 [ 136.364595][T14453] kobject_uevent+0x18/0x20 [ 136.369095][T14453] blk_add_partitions+0x43f/0xa80 [ 136.374113][T14453] bdev_disk_changed+0x1a7/0x200 [ 136.379045][T14453] loop_set_status+0x75f/0x7e0 [ 136.383801][T14453] lo_ioctl+0x758/0x11f0 [ 136.388038][T14453] ? path_openat+0x19ab/0x20b0 [ 136.392796][T14453] ? putname+0xa5/0xc0 [ 136.396873][T14453] ? ___cache_free+0x3c/0x300 [ 136.401547][T14453] ? blkdev_common_ioctl+0x9c3/0x1010 [ 136.406917][T14453] ? selinux_file_ioctl+0x8e0/0x970 [ 136.412142][T14453] ? lo_release+0x120/0x120 [ 136.416666][T14453] blkdev_ioctl+0x1d0/0x3c0 [ 136.421164][T14453] block_ioctl+0x6d/0x80 [ 136.425577][T14453] ? blkdev_iopoll+0x70/0x70 [ 136.430163][T14453] __se_sys_ioctl+0xcb/0x140 [ 136.434760][T14453] __x64_sys_ioctl+0x3f/0x50 [ 136.439360][T14453] do_syscall_64+0x34/0x50 [ 136.443855][T14453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.449748][T14453] RIP: 0033:0x466217 [ 136.453629][T14453] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.473408][T14453] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 01:33:34 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80, 0x0, r0}) io_uring_enter(r3, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0xfff, 0x2, "b4d1071d5182"}}) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 136.481945][T14453] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 136.489957][T14453] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 136.497932][T14453] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 136.506182][T14453] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 136.514197][T14453] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 136.526483][T14456] loop5: p2 p4 [ 136.546513][T14453] loop3: p2 size 327680 extends beyond EOD, truncated [ 136.554357][T14456] loop5: p2 size 327680 extends beyond EOD, truncated [ 136.567408][T14456] loop5: p4 size 2097152 extends beyond EOD, truncated [ 136.567520][T14453] loop3: p4 size 2097152 extends beyond EOD, truncated [ 136.594800][T14448] loop1: detected capacity change from 0 to 2 [ 136.657682][T14456] loop5: detected capacity change from 0 to 1 [ 136.667992][T14448] loop1: p2 p4 [ 136.671703][T14448] loop1: p2 size 327680 extends beyond EOD, truncated [ 136.693029][T14456] loop5: p2 p4 [ 136.697293][T14456] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:34 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x4}}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:34 executing program 3 (fault-call:0 fault-nth:51): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x44142, 0x0) fgetxattr(r3, &(0x7f00000001c0)=@random={'trusted.', '\x00'}, 0x0, 0xffffffffffffffe3) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 136.704500][T14448] loop1: p4 size 2097152 extends beyond EOD, truncated [ 136.714880][T14456] loop5: p4 size 2097152 extends beyond EOD, truncated [ 136.742618][ T1028] loop5: p2 p4 [ 136.746706][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:34 executing program 1: syz_read_part_table(0x406, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:34 executing program 5: syz_read_part_table(0x7a, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 136.763978][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 136.815548][T14541] loop3: detected capacity change from 0 to 1 [ 136.836291][T14541] loop3: p2 p4 [ 136.840207][T14541] FAULT_INJECTION: forcing a failure. [ 136.840207][T14541] name failslab, interval 1, probability 0, space 0, times 0 [ 136.852843][T14541] CPU: 1 PID: 14541 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2000, @fd_index=0x2, 0x10000, 0x7, 0x2, 0x2}, 0x2) syz_io_uring_setup(0x100075cc, &(0x7f0000000300)={0x0, 0x3ff}, &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r3, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000140), 0x1, 0x0, 0x1}, 0x59cd) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x50, r0, 0x8000000) 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x3d3c, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000400)={@mcast2, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) [ 136.861610][T14541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.871721][T14541] Call Trace: [ 136.875083][T14541] dump_stack+0x137/0x19d [ 136.879411][T14541] should_fail+0x23c/0x250 [ 136.883815][T14541] ? skb_clone+0x12c/0x1f0 [ 136.889275][T14541] __should_failslab+0x81/0x90 [ 136.894051][T14541] should_failslab+0x5/0x20 [ 136.898677][T14541] kmem_cache_alloc+0x46/0x300 [ 136.903469][T14541] skb_clone+0x12c/0x1f0 [ 136.907771][T14541] netlink_broadcast_filtered+0x50d/0xb90 [ 136.913577][T14541] ? skb_put+0xb9/0xf0 [ 136.917645][T14541] netlink_broadcast+0x35/0x50 [ 136.922425][T14541] kobject_uevent_env+0x8c9/0xc40 [ 136.927548][T14541] kobject_uevent+0x18/0x20 [ 136.932055][T14541] blk_add_partitions+0x43f/0xa80 [ 136.937067][T14541] bdev_disk_changed+0x1a7/0x200 [ 136.942058][T14541] loop_set_status+0x75f/0x7e0 [ 136.946904][T14541] lo_ioctl+0x758/0x11f0 [ 136.952886][T14541] ? path_openat+0x19ab/0x20b0 [ 136.957726][T14541] ? putname+0xa5/0xc0 [ 136.961779][T14541] ? ___cache_free+0x3c/0x300 [ 136.966459][T14541] ? blkdev_common_ioctl+0x9c3/0x1010 [ 136.971898][T14541] ? selinux_file_ioctl+0x8e0/0x970 [ 136.977082][T14541] ? lo_release+0x120/0x120 [ 136.981581][T14541] blkdev_ioctl+0x1d0/0x3c0 [ 136.986125][T14541] block_ioctl+0x6d/0x80 [ 136.990423][T14541] ? blkdev_iopoll+0x70/0x70 [ 136.994991][T14541] __se_sys_ioctl+0xcb/0x140 [ 136.999563][T14541] __x64_sys_ioctl+0x3f/0x50 [ 137.004174][T14541] do_syscall_64+0x34/0x50 [ 137.008589][T14541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.014547][T14541] RIP: 0033:0x466217 [ 137.018419][T14541] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.038021][T14541] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 137.046419][T14541] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 137.054427][T14541] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 137.062381][T14541] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 137.070546][T14541] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 137.078666][T14541] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 137.096330][T14541] loop3: p2 size 327680 extends beyond EOD, truncated [ 137.103948][T14573] loop1: detected capacity change from 0 to 2 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180), 0x0, 0x0, 0x0) io_uring_enter(r3, 0x63de, 0x259d, 0x2, &(0x7f0000000040)={[0x4]}, 0x8) [ 137.111059][T14541] loop3: p4 size 2097152 extends beyond EOD, truncated [ 137.126352][T14573] loop1: p2 p4 [ 137.130764][T14573] loop1: p2 size 327680 extends beyond EOD, truncated [ 137.141051][T14573] loop1: p4 size 2097152 extends beyond EOD, truncated [ 137.153879][ T1028] loop1: p2 p4 [ 137.157728][T14588] loop0: detected capacity change from 0 to 264192 01:33:34 executing program 3 (fault-call:0 fault-nth:52): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 137.158248][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 137.171111][T14588] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 137.180419][T14589] loop5: detected capacity change from 0 to 1 [ 137.181666][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 137.217532][T14589] loop5: p2 p4 [ 137.221092][T14589] loop5: p2 size 327680 extends beyond EOD, truncated [ 137.230974][T14589] loop5: p4 size 2097152 extends beyond EOD, truncated [ 137.233397][T14573] loop1: detected capacity change from 0 to 2 [ 137.244619][T14617] loop3: detected capacity change from 0 to 1 [ 137.260918][ T1798] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 137.276771][T14617] loop3: p2 p4 [ 137.280401][T14617] FAULT_INJECTION: forcing a failure. [ 137.280401][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 137.282744][T14573] loop1: p2 p4 [ 137.293072][T14617] CPU: 0 PID: 14617 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 137.296664][T14573] loop1: p2 size 327680 extends beyond EOD, truncated [ 137.305254][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.305268][T14617] Call Trace: [ 137.322480][T14573] loop1: p4 size 2097152 extends beyond EOD, [ 137.325567][T14617] dump_stack+0x137/0x19d [ 137.325590][T14617] should_fail+0x23c/0x250 [ 137.331688][T14573] truncated [ 137.335965][T14617] __should_failslab+0x81/0x90 [ 137.348273][T14617] ? call_usermodehelper_setup+0x81/0x160 [ 137.354110][T14617] should_failslab+0x5/0x20 [ 137.358626][T14617] kmem_cache_alloc_trace+0x49/0x320 [ 137.363959][T14617] ? add_uevent_var+0x16e/0x1c0 [ 137.368811][T14617] call_usermodehelper_setup+0x81/0x160 [ 137.374338][T14617] ? add_uevent_var+0x1c0/0x1c0 [ 137.379299][T14617] kobject_uevent_env+0xb31/0xc40 [ 137.384359][T14617] ? vprintk_func+0x137/0x140 [ 137.389074][T14617] ? __list_add_valid+0x28/0x90 [ 137.393901][T14617] ? free_unref_page_commit+0xa9/0x100 [ 137.399342][T14617] kobject_uevent+0x18/0x20 [ 137.403864][T14617] blk_add_partitions+0x43f/0xa80 [ 137.408870][T14617] bdev_disk_changed+0x1a7/0x200 [ 137.413806][T14617] loop_set_status+0x75f/0x7e0 [ 137.418574][T14617] lo_ioctl+0x758/0x11f0 [ 137.422936][T14617] ? path_openat+0x19ab/0x20b0 [ 137.427686][T14617] ? putname+0xa5/0xc0 [ 137.431758][T14617] ? ___cache_free+0x3c/0x300 [ 137.436420][T14617] ? blkdev_common_ioctl+0x9c3/0x1010 [ 137.441779][T14617] ? selinux_file_ioctl+0x8e0/0x970 [ 137.447116][T14617] ? lo_release+0x120/0x120 [ 137.451610][T14617] blkdev_ioctl+0x1d0/0x3c0 [ 137.456157][T14617] block_ioctl+0x6d/0x80 [ 137.460384][T14617] ? blkdev_iopoll+0x70/0x70 [ 137.465003][T14617] __se_sys_ioctl+0xcb/0x140 [ 137.469605][T14617] __x64_sys_ioctl+0x3f/0x50 [ 137.474177][T14617] do_syscall_64+0x34/0x50 [ 137.478653][T14617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.484541][T14617] RIP: 0033:0x466217 [ 137.488423][T14617] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:33:35 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80, 0x0, r0}) io_uring_enter(r3, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_enter(r0, 0x440e, 0xefc4, 0x2, &(0x7f0000000040)={[0x800]}, 0x8) r3 = signalfd4(r0, &(0x7f0000000180)={[0x3ff]}, 0x8, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400000, 0x90) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000140)={'batadv0\x00', {0x2, 0x0, @broadcast}}) 01:33:35 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x0, 0x2, 0x4}}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:35 executing program 1: syz_read_part_table(0x480, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 137.508112][T14617] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 137.519549][T14617] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 137.527503][T14617] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 137.535575][T14617] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 137.543528][T14617] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 137.551553][T14617] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 137.559608][T14617] loop3: p2 size 327680 extends beyond EOD, truncated [ 137.569774][T14589] loop5: detected capacity change from 0 to 1 [ 137.592462][T14617] loop3: p4 size 2097152 extends beyond EOD, truncated [ 137.601847][ T1028] loop1: p2 p4 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7ab4, 0xd432, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 01:33:35 executing program 3 (fault-call:0 fault-nth:53): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:35 executing program 5: syz_read_part_table(0x90, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 137.615163][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 137.616276][T14589] loop5: p2 p4 [ 137.625505][T14589] loop5: p2 size 327680 extends beyond EOD, truncated [ 137.633129][T14589] loop5: p4 size 2097152 extends beyond EOD, truncated [ 137.635213][T14652] loop0: detected capacity change from 0 to 264192 [ 137.641179][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x109100, 0x0, 0x1d}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x80) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 137.693397][ T1028] loop5: p2 p4 [ 137.699450][T14645] loop1: detected capacity change from 0 to 2 [ 137.705695][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 137.716725][T14652] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 137.717858][T14680] loop3: detected capacity change from 0 to 1 [ 137.732409][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 137.739680][T14645] loop1: p2 p4 [ 137.743236][T14645] loop1: p2 size 327680 extends beyond EOD, truncated [ 137.755939][T14645] loop1: p4 size 2097152 extends beyond EOD, truncated [ 137.763845][T14680] loop3: p2 p4 [ 137.767463][T14680] loop3: p2 size 327680 extends beyond EOD, truncated [ 137.774320][T14680] FAULT_INJECTION: forcing a failure. [ 137.774320][T14680] name failslab, interval 1, probability 0, space 0, times 0 [ 137.787094][T14680] CPU: 0 PID: 14680 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 137.795902][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.805965][T14680] Call Trace: [ 137.809257][T14680] dump_stack+0x137/0x19d [ 137.813626][T14680] should_fail+0x23c/0x250 [ 137.818049][T14680] ? security_inode_alloc+0x30/0x180 [ 137.823333][T14680] __should_failslab+0x81/0x90 [ 137.828086][T14680] should_failslab+0x5/0x20 [ 137.832577][T14680] kmem_cache_alloc+0x46/0x300 [ 137.837353][T14680] security_inode_alloc+0x30/0x180 [ 137.842460][T14680] inode_init_always+0x20b/0x420 [ 137.847418][T14680] ? bd_init_fs_context+0x80/0x80 [ 137.852431][T14680] new_inode_pseudo+0x73/0x1c0 [ 137.857187][T14680] new_inode+0x21/0x120 [ 137.861406][T14680] bdev_alloc+0x27/0x160 [ 137.865625][T14680] add_partition+0x155/0x580 [ 137.870198][T14680] blk_add_partitions+0x583/0xa80 [ 137.875207][T14680] bdev_disk_changed+0x1a7/0x200 [ 137.880127][T14680] loop_set_status+0x75f/0x7e0 [ 137.884875][T14680] lo_ioctl+0x758/0x11f0 [ 137.889130][T14680] ? path_openat+0x19ab/0x20b0 [ 137.894135][T14680] ? putname+0xa5/0xc0 [ 137.898247][T14680] ? ___cache_free+0x3c/0x300 [ 137.902902][T14680] ? blkdev_common_ioctl+0x9c3/0x1010 [ 137.908327][T14680] ? selinux_file_ioctl+0x8e0/0x970 [ 137.913545][T14680] ? lo_release+0x120/0x120 [ 137.918048][T14680] blkdev_ioctl+0x1d0/0x3c0 [ 137.922532][T14680] block_ioctl+0x6d/0x80 [ 137.926832][T14680] ? blkdev_iopoll+0x70/0x70 [ 137.931399][T14680] __se_sys_ioctl+0xcb/0x140 [ 137.936047][T14680] __x64_sys_ioctl+0x3f/0x50 [ 137.940658][T14680] do_syscall_64+0x34/0x50 [ 137.945055][T14680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.951028][T14680] RIP: 0033:0x466217 [ 137.954901][T14680] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.975162][T14680] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 137.983575][T14680] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 01:33:35 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x0, 0x0, 0x4}}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 137.991524][T14680] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 137.999482][T14680] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.007430][T14680] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 138.015478][T14680] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 138.023541][T14680] loop3: p2 could not be added: 12 [ 138.028864][T14680] loop3: p4 size 2097152 extends beyond EOD, truncated [ 138.040760][ T1028] loop1: p2 p4 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9e}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x4, 0x3, 0x3, 0x5, 0x18, 0x1, {0x1}}, 0x85e) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x80102, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xa) 01:33:35 executing program 3 (fault-call:0 fault-nth:54): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:35 executing program 2: syz_read_part_table(0x402, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 138.047581][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 138.054582][T12456] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.065578][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 138.082384][T14709] loop5: detected capacity change from 0 to 1 [ 138.129814][ T1028] loop5: p2 p4 [ 138.134045][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 138.143054][T14726] loop0: detected capacity change from 0 to 264192 [ 138.149334][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 138.152716][T14729] loop2: detected capacity change from 0 to 2 [ 138.157566][T14728] loop3: detected capacity change from 0 to 1 [ 138.163793][T14726] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.170936][T14709] loop5: p2 p4 [ 138.182124][T14709] loop5: p2 size 327680 extends beyond EOD, truncated [ 138.191827][T14709] loop5: p4 size 2097152 extends beyond EOD, truncated [ 138.196210][T14729] loop2: p2 p4 [ 138.202296][T14729] loop2: p2 size 327680 extends beyond EOD, truncated [ 138.202517][T14728] loop3: p2 p4 [ 138.214588][T14728] loop3: p2 size 327680 extends beyond EOD, truncated [ 138.215372][T14729] loop2: p4 size 2097152 extends beyond EOD, truncated [ 138.227050][T14728] FAULT_INJECTION: forcing a failure. [ 138.227050][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 138.241140][T14728] CPU: 1 PID: 14728 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 138.249894][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.260123][T14728] Call Trace: [ 138.263416][T14728] dump_stack+0x137/0x19d [ 138.267729][T14728] should_fail+0x23c/0x250 [ 138.272174][T14728] ? security_inode_alloc+0x30/0x180 [ 138.277449][T14728] __should_failslab+0x81/0x90 [ 138.282272][T14728] should_failslab+0x5/0x20 [ 138.286787][T14728] kmem_cache_alloc+0x46/0x300 [ 138.291543][T14728] security_inode_alloc+0x30/0x180 [ 138.296993][T14728] inode_init_always+0x20b/0x420 [ 138.302006][T14728] ? bd_init_fs_context+0x80/0x80 [ 138.307015][T14728] new_inode_pseudo+0x73/0x1c0 [ 138.311859][T14728] new_inode+0x21/0x120 [ 138.316050][T14728] bdev_alloc+0x27/0x160 [ 138.320274][T14728] add_partition+0x155/0x580 [ 138.324849][T14728] blk_add_partitions+0x583/0xa80 [ 138.329895][T14728] bdev_disk_changed+0x1a7/0x200 [ 138.334864][T14728] loop_set_status+0x75f/0x7e0 [ 138.339637][T14728] lo_ioctl+0x758/0x11f0 [ 138.343869][T14728] ? path_openat+0x19ab/0x20b0 [ 138.348665][T14728] ? putname+0xa5/0xc0 [ 138.352714][T14728] ? ___cache_free+0x3c/0x300 [ 138.357377][T14728] ? blkdev_common_ioctl+0x9c3/0x1010 [ 138.362731][T14728] ? selinux_file_ioctl+0x8e0/0x970 [ 138.367971][T14728] ? lo_release+0x120/0x120 [ 138.372485][T14728] blkdev_ioctl+0x1d0/0x3c0 [ 138.376985][T14728] block_ioctl+0x6d/0x80 [ 138.381269][T14728] ? blkdev_iopoll+0x70/0x70 [ 138.385833][T14728] __se_sys_ioctl+0xcb/0x140 [ 138.390416][T14728] __x64_sys_ioctl+0x3f/0x50 [ 138.394982][T14728] do_syscall_64+0x34/0x50 [ 138.399377][T14728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.405249][T14728] RIP: 0033:0x466217 [ 138.409117][T14728] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:33:36 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80, 0x0, r0}) io_uring_enter(r1, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:36 executing program 1: syz_read_part_table(0x4f5, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:36 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 138.428728][T14728] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 138.437125][T14728] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 138.445088][T14728] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 138.453140][T14728] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.461103][T14728] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 138.469119][T14728] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:36 executing program 5: syz_read_part_table(0x204, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:36 executing program 3 (fault-call:0 fault-nth:55): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 138.477162][T14728] loop3: p2 could not be added: 12 [ 138.482372][T14728] loop3: p4 size 2097152 extends beyond EOD, truncated [ 138.490011][T12456] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:33:36 executing program 2: syz_read_part_table(0x480, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 138.526401][T14765] loop1: detected capacity change from 0 to 2 [ 138.556358][T14765] loop1: p2 p4 [ 138.560000][T14765] loop1: p2 size 327680 extends beyond EOD, truncated [ 138.571576][T14777] loop5: detected capacity change from 0 to 1 [ 138.580956][T14765] loop1: p4 size 2097152 extends beyond EOD, truncated [ 138.588423][T14779] loop0: detected capacity change from 0 to 264192 [ 138.592969][T14784] loop3: detected capacity change from 0 to 1 [ 138.605823][T14789] loop2: detected capacity change from 0 to 2 [ 138.612299][T14779] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:33:36 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 138.636329][T14777] loop5: p2 p4 [ 138.636539][T14784] loop3: p2 p4 [ 138.640046][T14777] loop5: p2 size 327680 extends beyond EOD, truncated [ 138.643311][ T1028] loop2: p2 p4 [ 138.643349][ T1028] loop2: p2 size 327680 extends beyond EOD, truncated [ 138.661843][T14777] loop5: p4 size 2097152 extends beyond EOD, truncated [ 138.666639][T14784] loop3: p2 size 327680 extends beyond EOD, truncated [ 138.677647][T14765] loop1: detected capacity change from 0 to 2 [ 138.685111][T14784] FAULT_INJECTION: forcing a failure. [ 138.685111][T14784] name failslab, interval 1, probability 0, space 0, times 0 [ 138.697780][T14784] CPU: 1 PID: 14784 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 138.706757][ T1028] loop2: p4 size 2097152 extends beyond EOD, [ 138.719819][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.719835][T14784] Call Trace: [ 138.719841][T14784] dump_stack+0x137/0x19d [ 138.719862][T14784] should_fail+0x23c/0x250 [ 138.719877][T14784] __should_failslab+0x81/0x90 [ 138.725932][ T1028] truncated [ 138.735988][T14784] ? add_partition+0x1db/0x580 [ 138.760581][T14784] should_failslab+0x5/0x20 [ 138.765075][T14784] __kmalloc_track_caller+0x64/0x360 [ 138.770342][T14784] ? __list_add_valid+0x28/0x90 [ 138.776300][T14784] kmemdup+0x21/0x50 [ 138.780187][T14784] add_partition+0x1db/0x580 [ 138.784764][T14784] blk_add_partitions+0x583/0xa80 [ 138.789832][T14784] bdev_disk_changed+0x1a7/0x200 [ 138.794865][T14784] loop_set_status+0x75f/0x7e0 [ 138.799621][T14784] lo_ioctl+0x758/0x11f0 [ 138.803854][T14784] ? path_openat+0x19ab/0x20b0 [ 138.808685][T14784] ? kcsan_setup_watchpoint+0x26e/0x470 [ 138.814274][T14784] ? blkdev_common_ioctl+0x9c3/0x1010 [ 138.819638][T14784] ? selinux_file_ioctl+0x8e0/0x970 [ 138.824823][T14784] ? lo_release+0x120/0x120 [ 138.829329][T14784] blkdev_ioctl+0x1d0/0x3c0 [ 138.833822][T14784] block_ioctl+0x6d/0x80 [ 138.838046][T14784] ? blkdev_iopoll+0x70/0x70 [ 138.842679][T14784] __se_sys_ioctl+0xcb/0x140 [ 138.847269][T14784] __x64_sys_ioctl+0x3f/0x50 [ 138.851943][T14784] do_syscall_64+0x34/0x50 [ 138.856447][T14784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.862329][T14784] RIP: 0033:0x466217 [ 138.866219][T14784] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.885811][T14784] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 138.894203][T14784] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 138.902164][T14784] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 138.910113][T14784] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.918131][T14784] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 138.926081][T14784] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:36 executing program 3 (fault-call:0 fault-nth:56): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 138.934126][T14784] loop3: p2 could not be added: 12 [ 138.939340][T14784] loop3: p4 size 2097152 extends beyond EOD, truncated [ 138.943374][T14789] loop2: p2 p4 [ 138.950027][T12811] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 138.954632][T14789] loop2: p2 size 327680 extends beyond EOD, truncated [ 138.966781][T14765] loop1: p2 p4 [ 138.970371][T14765] loop1: p2 size 327680 extends beyond EOD, truncated [ 138.979667][T14789] loop2: p4 size 2097152 extends beyond EOD, truncated 01:33:36 executing program 1: syz_read_part_table(0x500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 138.982482][T14765] loop1: p4 size 2097152 extends beyond EOD, truncated [ 139.007659][T14777] loop5: detected capacity change from 0 to 1 01:33:36 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:36 executing program 2: rt_sigprocmask(0x1, &(0x7f0000000040)={[0x4]}, &(0x7f0000000140), 0x8) r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000440)={r3, r4+60000000}, 0x8) syz_io_uring_setup(0x630a, &(0x7f0000000300)={0x0, 0x1000000, 0x1}, &(0x7f00003b2000/0x1000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r7 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r10}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 139.054173][ T1028] loop5: p2 p4 [ 139.060706][T14835] loop3: detected capacity change from 0 to 1 [ 139.075776][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 139.097162][T14842] loop1: detected capacity change from 0 to 2 [ 139.097838][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 139.115281][T14777] loop5: p2 p4 [ 139.119308][T14835] loop3: p2 p4 [ 139.123054][T14835] loop3: p2 size 327680 extends beyond EOD, truncated [ 139.126112][T14842] loop1: p2 p4 [ 139.130585][T14777] loop5: p2 size 327680 extends beyond EOD, truncated [ 139.133743][T14842] loop1: p2 size 327680 extends beyond EOD, truncated [ 139.146706][T14835] FAULT_INJECTION: forcing a failure. [ 139.146706][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 139.159518][T14835] CPU: 1 PID: 14835 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 139.168278][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.178311][T14835] Call Trace: [ 139.181228][T14842] loop1: p4 size 2097152 extends beyond EOD, truncated [ 139.181571][T14835] dump_stack+0x137/0x19d [ 139.189598][T14777] loop5: p4 size 2097152 extends beyond EOD, [ 139.193453][T14835] should_fail+0x23c/0x250 [ 139.193480][T14835] __should_failslab+0x81/0x90 [ 139.199562][T14777] truncated [ 139.203936][T14835] ? kvasprintf_const+0x59/0x100 [ 139.216690][T14835] should_failslab+0x5/0x20 [ 139.221202][T14835] __kmalloc_track_caller+0x64/0x360 [ 139.226482][T14835] kvasprintf+0x70/0xf0 [ 139.228895][T14862] loop0: detected capacity change from 0 to 264192 [ 139.230642][T14835] ? cpumask_next+0x1e/0x30 [ 139.230664][T14835] kvasprintf_const+0x59/0x100 [ 139.246364][T14835] kobject_set_name_vargs+0x43/0xe0 [ 139.251553][T14835] dev_set_name+0x6c/0x90 [ 139.255975][T14835] ? add_partition+0x1db/0x580 [ 139.260722][T14835] ? add_partition+0x276/0x580 [ 139.265466][T14835] ? kmemdup+0x3c/0x50 [ 139.269594][T14835] add_partition+0x29b/0x580 [ 139.274209][T14835] blk_add_partitions+0x583/0xa80 [ 139.279274][T14835] bdev_disk_changed+0x1a7/0x200 [ 139.284194][T14835] loop_set_status+0x75f/0x7e0 [ 139.288952][T14835] lo_ioctl+0x758/0x11f0 [ 139.293232][T14835] ? path_openat+0x19ab/0x20b0 [ 139.297979][T14835] ? putname+0xa5/0xc0 [ 139.302084][T14835] ? ___cache_free+0x3c/0x300 [ 139.306738][T14835] ? blkdev_common_ioctl+0x9c3/0x1010 [ 139.312088][T14835] ? selinux_file_ioctl+0x8e0/0x970 [ 139.317269][T14835] ? lo_release+0x120/0x120 [ 139.321782][T14835] blkdev_ioctl+0x1d0/0x3c0 [ 139.326268][T14835] block_ioctl+0x6d/0x80 [ 139.330557][T14835] ? blkdev_iopoll+0x70/0x70 [ 139.335169][T14835] __se_sys_ioctl+0xcb/0x140 [ 139.339759][T14835] __x64_sys_ioctl+0x3f/0x50 [ 139.344344][T14835] do_syscall_64+0x34/0x50 [ 139.348763][T14835] entry_SYSCALL_64_after_hwframe+0x44/0xae 01:33:37 executing program 5: syz_read_part_table(0x300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 139.354646][T14835] RIP: 0033:0x466217 [ 139.358530][T14835] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.378115][T14835] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 139.386678][T14835] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 139.394672][T14835] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:37 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 139.402630][T14835] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 139.410625][T14835] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 139.418582][T14835] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 139.439863][T14835] loop3: p2 could not be added: 22 [ 139.445092][T14835] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:37 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:37 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 139.452329][T14862] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.464557][T14873] loop5: detected capacity change from 0 to 1 [ 139.473847][T14842] loop1: detected capacity change from 0 to 2 01:33:37 executing program 3 (fault-call:0 fault-nth:57): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:37 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 139.498014][ T1028] loop5: p2 p4 [ 139.505095][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 139.516434][T14842] loop1: p2 p4 [ 139.519957][T14842] loop1: p2 size 327680 extends beyond EOD, truncated [ 139.527689][T14901] loop0: detected capacity change from 0 to 264192 [ 139.533560][T14842] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:37 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:37 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:37 executing program 1: syz_read_part_table(0x600, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 139.542371][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 139.549700][T14901] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.564009][T14909] loop3: detected capacity change from 0 to 1 [ 139.571363][T14873] loop5: p2 p4 [ 139.575161][T14873] loop5: p2 size 327680 extends beyond EOD, truncated [ 139.585314][T14873] loop5: p4 size 2097152 extends beyond EOD, truncated [ 139.593676][T12811] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.626203][T14909] loop3: p2 p4 [ 139.629870][T14909] loop3: p2 size 327680 extends beyond EOD, truncated [ 139.636829][T14909] FAULT_INJECTION: forcing a failure. [ 139.636829][T14909] name failslab, interval 1, probability 0, space 0, times 0 [ 139.649655][T14909] CPU: 1 PID: 14909 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 139.658546][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.668797][T14909] Call Trace: [ 139.672076][T14909] dump_stack+0x137/0x19d [ 139.676391][T14909] should_fail+0x23c/0x250 [ 139.680826][T14909] __should_failslab+0x81/0x90 [ 139.685604][T14909] ? __kernfs_new_node+0x41/0x330 [ 139.690630][T14909] should_failslab+0x5/0x20 [ 139.695204][T14909] __kmalloc_track_caller+0x64/0x360 [ 139.700489][T14909] ? io_serial_in+0x2b/0x40 [ 139.704972][T14909] kstrdup_const+0x51/0x90 [ 139.709428][T14909] __kernfs_new_node+0x41/0x330 [ 139.714255][T14909] ? number+0xa03/0xb50 [ 139.718387][T14909] ? xas_create+0xadc/0xb30 [ 139.722963][T14909] kernfs_create_dir_ns+0x5e/0x140 [ 139.728069][T14909] sysfs_create_dir_ns+0x94/0x190 [ 139.733088][T14909] kobject_add_internal+0x488/0x880 [ 139.738268][T14909] kobject_add+0xbe/0x130 [ 139.742578][T14909] device_add+0x338/0xe50 [ 139.746903][T14909] add_partition+0x35b/0x580 [ 139.751512][T14909] blk_add_partitions+0x583/0xa80 [ 139.756512][T14909] bdev_disk_changed+0x1a7/0x200 [ 139.761426][T14909] loop_set_status+0x75f/0x7e0 [ 139.766223][T14909] lo_ioctl+0x758/0x11f0 [ 139.770451][T14909] ? path_openat+0x19ab/0x20b0 [ 139.775241][T14909] ? putname+0xa5/0xc0 [ 139.779297][T14909] ? ___cache_free+0x3c/0x300 [ 139.783961][T14909] ? blkdev_common_ioctl+0x9c3/0x1010 [ 139.790460][T14909] ? selinux_file_ioctl+0x8e0/0x970 [ 139.795878][T14909] ? lo_release+0x120/0x120 [ 139.800409][T14909] blkdev_ioctl+0x1d0/0x3c0 [ 139.804910][T14909] block_ioctl+0x6d/0x80 [ 139.809267][T14909] ? blkdev_iopoll+0x70/0x70 [ 139.813853][T14909] __se_sys_ioctl+0xcb/0x140 [ 139.818459][T14909] __x64_sys_ioctl+0x3f/0x50 [ 139.823035][T14909] do_syscall_64+0x34/0x50 [ 139.827433][T14909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 139.833352][T14909] RIP: 0033:0x466217 [ 139.837239][T14909] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.856943][T14909] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 139.865346][T14909] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 139.873319][T14909] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 139.881284][T14909] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 139.889253][T14909] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 139.897309][T14909] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 139.905357][T14909] kobject_add_internal failed for loop3p2 (error: -12 parent: loop3) [ 139.913443][T14909] loop3: p2 could not be added: 12 [ 139.918705][T14909] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:37 executing program 2: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x40, 0x2, 0x4}}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:37 executing program 3 (fault-call:0 fault-nth:58): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:37 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 139.936334][T14938] loop0: detected capacity change from 0 to 264192 [ 139.936914][T14873] loop5: detected capacity change from 0 to 1 [ 139.950039][T14938] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 139.986252][ T1028] loop5: p2 p4 [ 139.989832][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 140.000975][T12456] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.010838][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 140.011884][T14949] loop1: detected capacity change from 0 to 3 [ 140.024835][T14954] loop2: detected capacity change from 0 to 264192 [ 140.032838][T14873] loop5: p2 p4 [ 140.036916][T14873] loop5: p2 size 327680 extends beyond EOD, truncated [ 140.043812][T14954] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.045417][T14873] loop5: p4 size 2097152 extends beyond EOD, truncated [ 140.060837][T14963] loop3: detected capacity change from 0 to 1 [ 140.066083][T14949] loop1: p2 p4 [ 140.070476][T14949] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:37 executing program 5: syz_read_part_table(0x402, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 140.088347][T14949] loop1: p4 size 2097152 extends beyond EOD, truncated [ 140.096537][ T1028] loop3: p2 p4 [ 140.100263][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 140.108486][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 140.129306][T14963] FAULT_INJECTION: forcing a failure. 01:33:37 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:37 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 140.129306][T14963] name failslab, interval 1, probability 0, space 0, times 0 [ 140.130274][T14979] loop0: detected capacity change from 0 to 264192 [ 140.142018][T14963] CPU: 0 PID: 14963 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 140.155466][T14979] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.157292][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.157304][T14963] Call Trace: [ 140.157311][T14963] dump_stack+0x137/0x19d [ 140.157330][T14963] should_fail+0x23c/0x250 [ 140.157343][T14963] __should_failslab+0x81/0x90 [ 140.157386][T14963] should_failslab+0x5/0x20 [ 140.197806][T14963] kmem_cache_alloc_node+0x56/0x2f0 [ 140.203011][T14963] ? create_task_io_context+0x36/0x210 [ 140.208520][T14963] create_task_io_context+0x36/0x210 [ 140.213784][T14963] submit_bio_checks+0x778/0x800 [ 140.218843][T14963] ? mempool_alloc_slab+0x16/0x20 [ 140.223939][T14963] ? mempool_alloc_slab+0x16/0x20 [ 140.229148][T14963] submit_bio_noacct+0x33/0x7e0 [ 140.233999][T14963] ? mempool_alloc_slab+0x16/0x20 [ 140.239004][T14963] ? mempool_free+0x130/0x130 [ 140.243732][T14963] ? mempool_alloc+0x99/0x300 [ 140.248465][T14963] ? alloc_buffer_head+0x2d/0x1a0 [ 140.253482][T14963] ? kmem_cache_alloc+0x1af/0x300 [ 140.258666][T14963] submit_bio+0x16d/0x2b0 [ 140.263000][T14963] submit_bh_wbc+0x2f3/0x330 [ 140.267652][T14963] block_read_full_page+0x78c/0x870 [ 140.272880][T14963] ? blkdev_direct_IO+0x1060/0x1060 [ 140.278188][T14963] ? lru_cache_add+0xeb/0x130 [ 140.282911][T14963] ? add_to_page_cache_lru+0x150/0x1b0 [ 140.288487][T14963] blkdev_readpage+0x18/0x20 [ 140.293177][T14963] do_read_cache_page+0x503/0x7d0 [ 140.298259][T14963] read_cache_page+0x36/0x40 [ 140.302905][T14963] read_part_sector+0x9c/0x1d0 [ 140.307685][T14963] read_lba+0x185/0x2a0 [ 140.311875][T14963] ? efi_partition+0x22b/0x1120 [ 140.316731][T14963] efi_partition+0x249/0x1120 [ 140.321428][T14963] ? vsnprintf+0xe8f/0xed0 [ 140.325921][T14963] blk_add_partitions+0x2be/0xa80 [ 140.330938][T14963] bdev_disk_changed+0x1a7/0x200 [ 140.336987][T14963] loop_set_status+0x75f/0x7e0 [ 140.341783][T14963] lo_ioctl+0x758/0x11f0 [ 140.346071][T14963] ? path_openat+0x19ab/0x20b0 [ 140.350855][T14963] ? putname+0xa5/0xc0 [ 140.354946][T14963] ? ___cache_free+0x3c/0x300 [ 140.359683][T14963] ? blkdev_common_ioctl+0x9c3/0x1010 [ 140.365038][T14963] ? selinux_file_ioctl+0x8e0/0x970 [ 140.370219][T14963] ? lo_release+0x120/0x120 [ 140.374716][T14963] blkdev_ioctl+0x1d0/0x3c0 [ 140.379195][T14963] block_ioctl+0x6d/0x80 [ 140.383448][T14963] ? blkdev_iopoll+0x70/0x70 01:33:38 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 140.388012][T14963] __se_sys_ioctl+0xcb/0x140 [ 140.393647][T14963] __x64_sys_ioctl+0x3f/0x50 [ 140.398348][T14963] do_syscall_64+0x34/0x50 [ 140.402947][T14963] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 140.408888][T14963] RIP: 0033:0x466217 [ 140.412773][T14963] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:33:38 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 140.432479][T14963] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 140.440872][T14963] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 140.448883][T14963] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 140.456850][T14963] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 140.464833][T14963] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 140.472805][T14963] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 140.485241][T14963] loop3: p2 p4 01:33:38 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x717f, 0x2, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 140.487319][T12456] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.489506][T14963] loop3: p2 size 327680 extends beyond EOD, truncated [ 140.505125][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.520572][T14997] loop5: detected capacity change from 0 to 2 [ 140.529876][T14949] loop1: detected capacity change from 0 to 3 [ 140.536279][T14963] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:38 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:38 executing program 3 (fault-call:0 fault-nth:59): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 140.566731][T14997] loop5: p2 p4 [ 140.570306][T14949] loop1: p2 p4 [ 140.573835][T14949] loop1: p2 size 327680 extends beyond EOD, truncated [ 140.579368][T14997] loop5: p2 size 327680 extends beyond EOD, truncated [ 140.582122][T14949] loop1: p4 size 2097152 extends beyond EOD, truncated [ 140.587934][T15010] loop0: detected capacity change from 0 to 264192 01:33:38 executing program 1: syz_read_part_table(0x604, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:38 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 140.618460][T14997] loop5: p4 size 2097152 extends beyond EOD, truncated [ 140.626047][T15010] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.639311][T15021] loop2: detected capacity change from 0 to 1 [ 140.650896][ T1028] loop5: p2 p4 [ 140.658906][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:38 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 140.664350][T15033] loop3: detected capacity change from 0 to 1 [ 140.667221][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 140.680257][T15021] loop2: p2 p4 [ 140.683839][T15021] loop2: p2 size 327680 extends beyond EOD, truncated [ 140.693306][T15021] loop2: p4 size 2097152 extends beyond EOD, truncated [ 140.693802][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.716254][T15033] loop3: p2 p4 [ 140.720136][T15033] loop3: p2 size 327680 extends beyond EOD, truncated [ 140.727673][T15033] FAULT_INJECTION: forcing a failure. [ 140.727673][T15033] name failslab, interval 1, probability 0, space 0, times 0 [ 140.740321][T15033] CPU: 0 PID: 15033 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 140.741519][T15053] loop1: detected capacity change from 0 to 3 [ 140.749090][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.749104][T15033] Call Trace: [ 140.749114][T15033] dump_stack+0x137/0x19d [ 140.749136][T15033] should_fail+0x23c/0x250 [ 140.777178][T15033] ? __kernfs_new_node+0x6a/0x330 [ 140.782271][T15033] __should_failslab+0x81/0x90 [ 140.783577][T14997] loop5: detected capacity change from 0 to 2 [ 140.787039][T15033] should_failslab+0x5/0x20 [ 140.787065][T15033] kmem_cache_alloc+0x46/0x300 [ 140.787151][T15033] __kernfs_new_node+0x6a/0x330 [ 140.807239][T15033] ? number+0xa03/0xb50 [ 140.811393][T15033] ? xas_create+0xadc/0xb30 [ 140.815899][T15033] kernfs_create_dir_ns+0x5e/0x140 [ 140.816927][T15070] loop0: detected capacity change from 0 to 264192 [ 140.821039][T15033] sysfs_create_dir_ns+0x94/0x190 [ 140.829191][T15070] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 140.832568][T15033] kobject_add_internal+0x488/0x880 [ 140.846764][T15033] kobject_add+0xbe/0x130 [ 140.851121][T15033] device_add+0x338/0xe50 [ 140.855455][T15033] add_partition+0x35b/0x580 [ 140.860046][T15033] blk_add_partitions+0x583/0xa80 [ 140.865098][T15033] bdev_disk_changed+0x1a7/0x200 [ 140.870130][T15033] loop_set_status+0x75f/0x7e0 [ 140.875136][T15033] lo_ioctl+0x758/0x11f0 [ 140.879532][T15033] ? path_openat+0x19ab/0x20b0 [ 140.884293][T15033] ? putname+0xa5/0xc0 [ 140.888355][T15033] ? ___cache_free+0x3c/0x300 [ 140.893097][T15033] ? blkdev_common_ioctl+0x9c3/0x1010 [ 140.898461][T15033] ? selinux_file_ioctl+0x8e0/0x970 [ 140.903726][T15033] ? lo_release+0x120/0x120 [ 140.908222][T15033] blkdev_ioctl+0x1d0/0x3c0 [ 140.912704][T15033] block_ioctl+0x6d/0x80 [ 140.916987][T15033] ? blkdev_iopoll+0x70/0x70 [ 140.921599][T15033] __se_sys_ioctl+0xcb/0x140 [ 140.926169][T15033] __x64_sys_ioctl+0x3f/0x50 [ 140.930733][T15033] do_syscall_64+0x34/0x50 [ 140.935133][T15033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 140.941012][T15033] RIP: 0033:0x466217 [ 140.944882][T15033] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.964581][T15033] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 140.972975][T15033] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 140.980926][T15033] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 140.988930][T15033] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 140.996893][T15033] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 141.004881][T15033] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 141.012885][T15033] kobject_add_internal failed for loop3p2 (error: -12 parent: loop3) 01:33:38 executing program 5: syz_read_part_table(0x406, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:38 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:38 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:38 executing program 3 (fault-call:0 fault-nth:60): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 141.020979][T15033] loop3: p2 could not be added: 12 [ 141.026181][T15033] loop3: p4 size 2097152 extends beyond EOD, truncated [ 141.033215][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.048142][T15053] loop1: p2 p4 [ 141.052072][T15053] loop1: p2 size 327680 extends beyond EOD, truncated [ 141.059477][T15053] loop1: p4 size 2097152 extends beyond EOD, truncated [ 141.066441][T14997] loop5: p2 p4 [ 141.069981][T14997] loop5: p2 size 327680 extends beyond EOD, truncated [ 141.080649][T14997] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 141.125208][T15053] loop1: detected capacity change from 0 to 3 [ 141.156166][ T1028] loop1: p2 p4 [ 141.156359][T15100] loop0: detected capacity change from 0 to 264192 [ 141.159729][T15094] loop3: detected capacity change from 0 to 1 01:33:39 executing program 1: syz_read_part_table(0x700, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 141.172542][T15100] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.172772][T15101] loop2: detected capacity change from 0 to 1 [ 141.184629][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 141.195089][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 141.207100][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.213681][T15053] loop1: p2 p4 [ 141.219765][T15053] loop1: p2 size 327680 extends beyond EOD, truncated [ 141.227362][T15125] loop5: detected capacity change from 0 to 2 [ 141.227945][T15053] loop1: p4 size 2097152 extends beyond EOD, truncated [ 141.240656][T15094] loop3: p2 p4 [ 141.244557][T15101] loop2: p2 p4 [ 141.251461][T15125] loop5: p2 p4 [ 141.253279][T15101] loop2: p2 size 327680 extends beyond EOD, truncated [ 141.258781][T15125] loop5: p2 size 327680 extends beyond EOD, truncated [ 141.263104][T15094] loop3: p2 size 327680 extends beyond EOD, truncated [ 141.269179][T15125] loop5: p4 size 2097152 extends beyond EOD, truncated [ 141.277831][T15094] FAULT_INJECTION: forcing a failure. [ 141.277831][T15094] name failslab, interval 1, probability 0, space 0, times 0 [ 141.289211][T15101] loop2: p4 size 2097152 extends beyond EOD, truncated [ 141.295210][T15094] CPU: 1 PID: 15094 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 141.310785][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.320865][T15094] Call Trace: [ 141.324182][T15094] dump_stack+0x137/0x19d [ 141.325366][T15138] loop0: detected capacity change from 0 to 264192 [ 141.328511][T15094] should_fail+0x23c/0x250 [ 141.339427][T15094] ? __kernfs_new_node+0x6a/0x330 [ 141.344543][T15094] __should_failslab+0x81/0x90 [ 141.349298][T15094] should_failslab+0x5/0x20 [ 141.353788][T15094] kmem_cache_alloc+0x46/0x300 [ 141.358537][T15094] __kernfs_new_node+0x6a/0x330 [ 141.363373][T15094] ? __cond_resched+0x11/0x40 [ 141.368110][T15094] ? kernfs_activate+0x2b9/0x2d0 [ 141.373250][T15094] ? kernfs_add_one+0x356/0x3c0 [ 141.378080][T15094] kernfs_new_node+0x5b/0xd0 [ 141.382774][T15094] __kernfs_create_file+0x45/0x1a0 [ 141.387876][T15094] sysfs_add_file_mode_ns+0x1c1/0x250 [ 141.393272][T15094] sysfs_create_file_ns+0x8b/0xd0 [ 141.398321][T15094] device_create_file+0xa7/0x110 [ 141.403243][T15094] device_add+0x3da/0xe50 [ 141.407553][T15094] add_partition+0x35b/0x580 [ 141.412202][T15094] blk_add_partitions+0x583/0xa80 [ 141.417232][T15094] bdev_disk_changed+0x1a7/0x200 [ 141.422148][T15094] loop_set_status+0x75f/0x7e0 [ 141.426972][T15094] lo_ioctl+0x758/0x11f0 [ 141.431240][T15094] ? path_openat+0x19ab/0x20b0 [ 141.436033][T15094] ? putname+0xa5/0xc0 [ 141.440083][T15094] ? ___cache_free+0x3c/0x300 [ 141.444745][T15094] ? blkdev_common_ioctl+0x9c3/0x1010 [ 141.450094][T15094] ? selinux_file_ioctl+0x8e0/0x970 [ 141.455299][T15094] ? lo_release+0x120/0x120 [ 141.459890][T15094] blkdev_ioctl+0x1d0/0x3c0 [ 141.464373][T15094] block_ioctl+0x6d/0x80 [ 141.468599][T15094] ? blkdev_iopoll+0x70/0x70 [ 141.473183][T15094] __se_sys_ioctl+0xcb/0x140 [ 141.477830][T15094] __x64_sys_ioctl+0x3f/0x50 [ 141.482449][T15094] do_syscall_64+0x34/0x50 [ 141.486862][T15094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 141.492738][T15094] RIP: 0033:0x466217 [ 141.496611][T15094] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 141.516278][T15094] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 141.524678][T15094] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 141.532630][T15094] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 141.540588][T15094] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 141.548603][T15094] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 141.556551][T15094] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 141.566151][T15094] loop3: p2 could not be added: 12 01:33:39 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:39 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 141.571383][T15094] loop3: p4 size 2097152 extends beyond EOD, truncated [ 141.574763][T15138] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.597243][ T1028] loop3: p2 p4 [ 141.607535][T15125] loop5: detected capacity change from 0 to 2 [ 141.614594][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 141.622514][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 141.629379][T15165] loop2: detected capacity change from 0 to 1 [ 141.630033][T15161] loop1: detected capacity change from 0 to 3 [ 141.635943][T15125] loop5: p2 p4 [ 141.645155][T15125] loop5: p2 size 327680 extends beyond EOD, truncated [ 141.656107][T15161] loop1: p2 p4 [ 141.659794][T15165] loop2: p2 p4 [ 141.662113][T15125] loop5: p4 size 2097152 extends beyond EOD, truncated [ 141.663449][T15161] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:39 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:39 executing program 3 (fault-call:0 fault-nth:61): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:39 executing program 5: syz_read_part_table(0x480, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 141.677326][T15165] loop2: p2 size 327680 extends beyond EOD, truncated [ 141.677963][T15175] loop0: detected capacity change from 0 to 264192 [ 141.685549][T15165] loop2: p4 size 2097152 extends beyond EOD, truncated [ 141.697729][T15175] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.699245][T15161] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:39 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) [ 141.727276][ T1028] loop1: p2 p4 [ 141.730889][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 141.738522][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 141.743322][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 141.764705][T15199] loop3: detected capacity change from 0 to 1 [ 141.780548][T15203] loop2: detected capacity change from 0 to 1 [ 141.796270][T15199] loop3: p2 p4 [ 141.799948][T15199] loop3: p2 size 327680 extends beyond EOD, truncated [ 141.803473][T15161] loop1: detected capacity change from 0 to 3 [ 141.808755][T15199] FAULT_INJECTION: forcing a failure. [ 141.808755][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 141.825472][T15199] CPU: 0 PID: 15199 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 141.834370][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.844410][T15199] Call Trace: [ 141.847733][T15199] dump_stack+0x137/0x19d [ 141.852082][T15199] should_fail+0x23c/0x250 [ 141.856478][T15199] __should_failslab+0x81/0x90 [ 141.861278][T15199] ? __kernfs_new_node+0x41/0x330 [ 141.866384][T15199] should_failslab+0x5/0x20 [ 141.870919][T15199] __kmalloc_track_caller+0x64/0x360 [ 141.876278][T15199] kstrdup_const+0x51/0x90 [ 141.880769][T15199] __kernfs_new_node+0x41/0x330 [ 141.885607][T15199] ? __cond_resched+0x11/0x40 [ 141.890267][T15199] ? mutex_lock+0x9/0x30 [ 141.894488][T15199] kernfs_new_node+0x5b/0xd0 [ 141.899059][T15199] kernfs_create_link+0x68/0x120 [ 141.904006][T15199] sysfs_do_create_link_sd+0x98/0x110 [ 141.909450][T15199] sysfs_create_link+0x4d/0x60 [ 141.914209][T15199] device_add+0x602/0xe50 [ 141.918522][T15199] add_partition+0x35b/0x580 [ 141.923095][T15199] blk_add_partitions+0x583/0xa80 [ 141.928125][T15199] bdev_disk_changed+0x1a7/0x200 [ 141.933092][T15199] loop_set_status+0x75f/0x7e0 [ 141.937840][T15199] lo_ioctl+0x758/0x11f0 [ 141.942116][T15199] ? path_openat+0x19ab/0x20b0 [ 141.946863][T15199] ? kcsan_setup_watchpoint+0x26e/0x470 [ 141.952388][T15199] ? blkdev_common_ioctl+0x9c3/0x1010 [ 141.957752][T15199] ? selinux_file_ioctl+0x8e0/0x970 [ 141.962939][T15199] ? lo_release+0x120/0x120 [ 141.967448][T15199] blkdev_ioctl+0x1d0/0x3c0 [ 141.972126][T15199] block_ioctl+0x6d/0x80 [ 141.976349][T15199] ? blkdev_iopoll+0x70/0x70 [ 141.980919][T15199] __se_sys_ioctl+0xcb/0x140 [ 141.985501][T15199] __x64_sys_ioctl+0x3f/0x50 [ 141.990140][T15199] do_syscall_64+0x34/0x50 [ 141.994538][T15199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.000443][T15199] RIP: 0033:0x466217 [ 142.004315][T15199] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:33:39 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 142.023973][T15199] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 142.032363][T15199] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 142.040320][T15199] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 142.048326][T15199] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 142.056382][T15199] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 142.064345][T15199] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 142.079281][T15199] loop3: p2 could not be added: 12 [ 142.084521][T15199] loop3: p4 size 2097152 extends beyond EOD, truncated [ 142.093509][ T1028] loop2: p2 p4 [ 142.096051][T15161] loop1: p2 p4 [ 142.097154][ T1028] loop2: p2 size 327680 extends beyond EOD, truncated [ 142.100927][T15161] loop1: p2 size 327680 extends beyond EOD, truncated [ 142.112968][ T1028] loop2: p4 size 2097152 extends beyond EOD, [ 142.114054][T15220] loop5: detected capacity change from 0 to 2 [ 142.113997][ T1028] truncated 01:33:39 executing program 1: syz_read_part_table(0x900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:39 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 01:33:39 executing program 3 (fault-call:0 fault-nth:62): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:39 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 142.121171][T15217] loop0: detected capacity change from 0 to 264192 [ 142.134086][T15161] loop1: p4 size 2097152 extends beyond EOD, truncated [ 142.144453][T15203] loop2: p2 p4 [ 142.146571][T15217] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 142.149777][T15203] loop2: p2 size 327680 extends beyond EOD, truncated [ 142.166285][T15220] loop5: p2 p4 [ 142.170361][T15220] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:40 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 142.190658][T15220] loop5: p4 size 2097152 extends beyond EOD, truncated [ 142.199135][T15203] loop2: p4 size 2097152 extends beyond EOD, truncated [ 142.226339][ T1028] loop2: p2 p4 [ 142.231044][ T1028] loop2: p2 size 327680 extends beyond EOD, truncated [ 142.234468][T15270] loop1: detected capacity change from 0 to 4 [ 142.239048][T15251] loop3: detected capacity change from 0 to 1 [ 142.250937][T15220] loop5: detected capacity change from 0 to 2 [ 142.259298][T15275] loop0: detected capacity change from 0 to 264192 [ 142.259553][ T1028] loop2: p4 size 2097152 extends beyond EOD, truncated [ 142.274439][T15275] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 142.284574][T15220] loop5: p2 p4 01:33:40 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) [ 142.286022][T15270] loop1: p2 p4 [ 142.288288][T15251] loop3: p2 p4 [ 142.291543][T15270] loop1: p2 size 327680 extends beyond EOD, truncated [ 142.296527][T15251] loop3: p2 size 327680 extends beyond EOD, truncated [ 142.308790][T15220] loop5: p2 size 327680 extends beyond EOD, truncated [ 142.313900][T15270] loop1: p4 size 2097152 extends beyond EOD, truncated [ 142.323763][T15220] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:40 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x80}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(0xffffffffffffffff, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 142.342960][T15251] FAULT_INJECTION: forcing a failure. [ 142.342960][T15251] name failslab, interval 1, probability 0, space 0, times 0 [ 142.355715][T15251] CPU: 1 PID: 15251 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 142.364515][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.374717][T15251] Call Trace: [ 142.377988][T15251] dump_stack+0x137/0x19d [ 142.382318][T15251] should_fail+0x23c/0x250 [ 142.386729][T15251] ? __kernfs_new_node+0x6a/0x330 [ 142.391755][T15251] __should_failslab+0x81/0x90 [ 142.396575][T15251] should_failslab+0x5/0x20 [ 142.401073][T15251] kmem_cache_alloc+0x46/0x300 [ 142.405884][T15251] __kernfs_new_node+0x6a/0x330 [ 142.410734][T15251] ? kernfs_add_one+0x356/0x3c0 [ 142.415588][T15251] ? __kernfs_create_file+0x189/0x1a0 [ 142.420690][T15301] loop2: detected capacity change from 0 to 1 [ 142.421024][T15251] kernfs_new_node+0x5b/0xd0 [ 142.431768][T15251] kernfs_create_link+0x68/0x120 [ 142.436759][T15251] sysfs_do_create_link_sd+0x98/0x110 [ 142.442206][T15251] sysfs_create_link+0x4d/0x60 [ 142.446993][T15251] device_add+0x47f/0xe50 [ 142.451366][T15251] add_partition+0x35b/0x580 [ 142.456108][T15251] blk_add_partitions+0x583/0xa80 [ 142.461216][T15251] bdev_disk_changed+0x1a7/0x200 [ 142.466170][T15251] loop_set_status+0x75f/0x7e0 [ 142.470923][T15251] lo_ioctl+0x758/0x11f0 [ 142.475159][T15251] ? path_openat+0x19ab/0x20b0 [ 142.479958][T15251] ? putname+0xa5/0xc0 [ 142.484005][T15251] ? ___cache_free+0x3c/0x300 [ 142.488656][T15251] ? blkdev_common_ioctl+0x9c3/0x1010 [ 142.494035][T15251] ? selinux_file_ioctl+0x8e0/0x970 [ 142.499226][T15251] ? lo_release+0x120/0x120 [ 142.503712][T15251] blkdev_ioctl+0x1d0/0x3c0 [ 142.508200][T15251] block_ioctl+0x6d/0x80 [ 142.512434][T15251] ? blkdev_iopoll+0x70/0x70 [ 142.517981][T15251] __se_sys_ioctl+0xcb/0x140 [ 142.522569][T15251] __x64_sys_ioctl+0x3f/0x50 [ 142.527148][T15251] do_syscall_64+0x34/0x50 [ 142.531580][T15251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.537452][T15251] RIP: 0033:0x466217 [ 142.541332][T15251] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.560923][T15251] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 142.569362][T15251] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 142.577335][T15251] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 142.585298][T15251] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 01:33:40 executing program 5: syz_read_part_table(0x4f5, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 142.593245][T15251] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 142.601193][T15251] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 142.609714][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 142.613851][T15251] loop3: p2 could not be added: 12 [ 142.624068][T15251] loop3: p4 size 2097152 extends beyond EOD, truncated [ 142.641324][T15301] loop2: p2 p4 01:33:40 executing program 3 (fault-call:0 fault-nth:63): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:40 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) [ 142.647652][T15301] loop2: p2 size 327680 extends beyond EOD, truncated [ 142.658217][T15270] loop1: detected capacity change from 0 to 4 [ 142.659667][T15301] loop2: p4 size 2097152 extends beyond EOD, truncated [ 142.676243][ T1028] loop1: p2 p4 [ 142.680028][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 142.687755][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:40 executing program 1: syz_read_part_table(0xa00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 142.705914][T15270] loop1: p2 p4 [ 142.709504][T15270] loop1: p2 size 327680 extends beyond EOD, truncated [ 142.721176][T15342] loop0: detected capacity change from 0 to 264192 [ 142.722078][T15332] loop5: detected capacity change from 0 to 2 [ 142.734061][T15342] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:33:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 142.751076][T15349] loop3: detected capacity change from 0 to 1 [ 142.751673][T15270] loop1: p4 size 2097152 extends beyond EOD, truncated [ 142.771517][T15353] loop2: detected capacity change from 0 to 1 [ 142.786460][T15332] loop5: p2 p4 [ 142.790091][T15332] loop5: p2 size 327680 extends beyond EOD, truncated [ 142.795903][T15349] loop3: p2 p4 [ 142.800490][T15349] loop3: p2 size 327680 extends beyond EOD, truncated [ 142.808704][T15332] loop5: p4 size 2097152 extends beyond EOD, truncated [ 142.813700][T15349] FAULT_INJECTION: forcing a failure. [ 142.813700][T15349] name failslab, interval 1, probability 0, space 0, times 0 [ 142.818774][T15353] loop2: p2 p4 [ 142.828287][T15349] CPU: 1 PID: 15349 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 142.832787][T15353] loop2: p2 size 327680 extends beyond EOD, [ 142.840737][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.840750][T15349] Call Trace: [ 142.840757][T15349] dump_stack+0x137/0x19d [ 142.846778][T15353] truncated [ 142.856812][T15349] should_fail+0x23c/0x250 [ 142.865594][T15353] loop2: p4 size 2097152 extends beyond EOD, [ 142.867478][T15349] ? __kernfs_new_node+0x6a/0x330 [ 142.867501][T15349] __should_failslab+0x81/0x90 [ 142.867567][T15349] should_failslab+0x5/0x20 [ 142.871955][T15353] truncated [ 142.895440][T15349] kmem_cache_alloc+0x46/0x300 [ 142.900205][T15349] __kernfs_new_node+0x6a/0x330 [ 142.905040][T15349] ? __cond_resched+0x11/0x40 [ 142.909701][T15349] ? mutex_lock+0x9/0x30 [ 142.914025][T15349] kernfs_new_node+0x5b/0xd0 [ 142.918591][T15349] kernfs_create_link+0x68/0x120 [ 142.923509][T15349] sysfs_do_create_link_sd+0x98/0x110 [ 142.929025][T15349] sysfs_create_link+0x4d/0x60 [ 142.933773][T15349] device_add+0x602/0xe50 [ 142.938125][T15349] add_partition+0x35b/0x580 [ 142.942859][T15349] blk_add_partitions+0x583/0xa80 [ 142.947869][T15349] bdev_disk_changed+0x1a7/0x200 [ 142.952817][T15349] loop_set_status+0x75f/0x7e0 [ 142.957564][T15349] lo_ioctl+0x758/0x11f0 [ 142.961798][T15349] ? path_openat+0x19ab/0x20b0 [ 142.966566][T15349] ? putname+0xa5/0xc0 [ 142.970613][T15349] ? ___cache_free+0x3c/0x300 [ 142.975284][T15349] ? blkdev_common_ioctl+0x9c3/0x1010 [ 142.980648][T15349] ? selinux_file_ioctl+0x8e0/0x970 [ 142.985861][T15349] ? lo_release+0x120/0x120 [ 142.990460][T15349] blkdev_ioctl+0x1d0/0x3c0 [ 142.994947][T15349] block_ioctl+0x6d/0x80 [ 142.999170][T15349] ? blkdev_iopoll+0x70/0x70 [ 143.003736][T15349] __se_sys_ioctl+0xcb/0x140 [ 143.008315][T15349] __x64_sys_ioctl+0x3f/0x50 [ 143.012923][T15349] do_syscall_64+0x34/0x50 [ 143.017340][T15349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 143.023272][T15349] RIP: 0033:0x466217 [ 143.027142][T15349] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.046820][T15349] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 01:33:40 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 143.055274][T15349] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 143.063221][T15349] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 143.071167][T15349] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 143.079151][T15349] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 143.087279][T15349] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 143.095842][T15349] loop3: p2 could not be added: 12 [ 143.101043][T15349] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:40 executing program 3 (fault-call:0 fault-nth:64): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 143.102103][T12456] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.131763][T15383] loop1: detected capacity change from 0 to 5 [ 143.137997][T15332] loop5: detected capacity change from 0 to 2 [ 143.176067][T15332] loop5: p2 p4 [ 143.176084][T15389] loop2: detected capacity change from 0 to 1 [ 143.179581][T15332] loop5: p2 size 327680 extends beyond EOD, truncated [ 143.200853][T15383] loop1: p2 p4 [ 143.204519][T15402] loop0: detected capacity change from 0 to 264192 [ 143.204645][T15383] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) 01:33:41 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 143.218035][T15402] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.219385][T15332] loop5: p4 size 2097152 extends beyond EOD, truncated [ 143.235418][T15389] loop2: p2 p4 [ 143.239700][T15389] loop2: p2 size 327680 extends beyond EOD, truncated 01:33:41 executing program 5: syz_read_part_table(0x500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:41 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 143.266649][T15389] loop2: p4 size 2097152 extends beyond EOD, truncated [ 143.267168][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.283362][T15383] loop1: p4 size 2097152 extends beyond EOD, truncated [ 143.288639][T15410] loop3: detected capacity change from 0 to 1 [ 143.297422][ T1028] loop1: p2 p4 [ 143.300998][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 143.309522][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 143.336091][T15410] loop3: p2 p4 [ 143.339676][T15410] loop3: p2 size 327680 extends beyond EOD, truncated [ 143.350595][T15410] FAULT_INJECTION: forcing a failure. [ 143.350595][T15410] name failslab, interval 1, probability 0, space 0, times 0 [ 143.358965][ T1028] loop5: p2 p4 [ 143.363251][T15410] CPU: 1 PID: 15410 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 143.367623][ T1028] loop5: p2 size 327680 extends beyond EOD, [ 143.375388][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.375401][T15410] Call Trace: [ 143.375407][T15410] dump_stack+0x137/0x19d [ 143.381385][ T1028] truncated [ 143.391403][T15410] should_fail+0x23c/0x250 [ 143.397979][T15383] loop1: detected capacity change from 0 to 5 [ 143.398976][T15410] ? __kernfs_new_node+0x6a/0x330 [ 143.402648][ T1028] loop5: p4 size 2097152 extends beyond EOD, [ 143.406473][T15410] __should_failslab+0x81/0x90 [ 143.406498][T15410] should_failslab+0x5/0x20 [ 143.412548][ T1028] truncated [ 143.417532][T15410] kmem_cache_alloc+0x46/0x300 [ 143.440615][T15410] __kernfs_new_node+0x6a/0x330 [ 143.445446][T15410] ? mutex_lock+0x9/0x30 [ 143.449700][T15410] ? selinux_kernfs_init_security+0x90/0x330 [ 143.455662][T15410] ? idr_alloc_cyclic+0x249/0x2d0 [ 143.460785][T15410] kernfs_new_node+0x5b/0xd0 [ 143.465359][T15410] __kernfs_create_file+0x45/0x1a0 [ 143.470458][T15410] sysfs_add_file_mode_ns+0x1c1/0x250 [ 143.475873][T15410] internal_create_group+0x2e4/0x850 [ 143.481221][T15410] sysfs_create_groups+0x3d/0xf0 [ 143.486214][T15410] device_add+0x4dc/0xe50 [ 143.490568][T15410] add_partition+0x35b/0x580 [ 143.495146][T15410] blk_add_partitions+0x583/0xa80 [ 143.500164][T15410] bdev_disk_changed+0x1a7/0x200 [ 143.505105][T15410] loop_set_status+0x75f/0x7e0 [ 143.509856][T15410] lo_ioctl+0x758/0x11f0 [ 143.514126][T15410] ? path_openat+0x19ab/0x20b0 [ 143.518906][T15410] ? putname+0xa5/0xc0 [ 143.522959][T15410] ? ___cache_free+0x3c/0x300 [ 143.527643][T15410] ? blkdev_common_ioctl+0x9c3/0x1010 [ 143.532994][T15410] ? selinux_file_ioctl+0x8e0/0x970 [ 143.538174][T15410] ? lo_release+0x120/0x120 [ 143.542657][T15410] blkdev_ioctl+0x1d0/0x3c0 [ 143.547162][T15410] block_ioctl+0x6d/0x80 [ 143.551383][T15410] ? blkdev_iopoll+0x70/0x70 [ 143.555950][T15410] __se_sys_ioctl+0xcb/0x140 [ 143.560588][T15410] __x64_sys_ioctl+0x3f/0x50 [ 143.565159][T15410] do_syscall_64+0x34/0x50 [ 143.569559][T15410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 143.575468][T15410] RIP: 0033:0x466217 [ 143.579342][T15410] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.599889][T15410] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 143.608291][T15410] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 143.616248][T15410] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 143.624201][T15410] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 143.632152][T15410] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 143.640100][T15410] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 143.656530][T15435] loop2: detected capacity change from 0 to 1 [ 143.663054][T15410] loop3: p2 could not be added: 12 [ 143.668355][T15410] loop3: p4 size 2097152 extends beyond EOD, truncated [ 143.669497][T15453] loop0: detected capacity change from 0 to 264192 01:33:41 executing program 3 (fault-call:0 fault-nth:65): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:41 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:41 executing program 1: syz_read_part_table(0xb00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:41 executing program 0: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) [ 143.684111][T15453] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.693764][T15383] loop1: p2 p4 [ 143.697460][T15435] loop2: p2 p4 [ 143.701103][T15383] loop1: p2 size 327680 extends beyond EOD, truncated [ 143.706769][T15435] loop2: p2 size 327680 extends beyond EOD, truncated [ 143.710687][T15454] loop5: detected capacity change from 0 to 2 [ 143.715244][T15435] loop2: p4 size 2097152 extends beyond EOD, truncated [ 143.721493][T15383] loop1: p4 size 2097152 extends beyond EOD, truncated [ 143.765901][T15454] loop5: p2 p4 [ 143.769492][T15454] loop5: p2 size 327680 extends beyond EOD, truncated [ 143.781325][ T848] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.789409][ T1028] loop1: p2 p4 [ 143.794151][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 143.797862][T15454] loop5: p4 size 2097152 extends beyond EOD, truncated [ 143.801221][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 143.814738][T15478] loop3: detected capacity change from 0 to 1 [ 143.815387][T15480] loop2: detected capacity change from 0 to 1 [ 143.846380][T15480] loop2: p2 p4 [ 143.846485][T15478] loop3: p2 p4 [ 143.850009][T15480] loop2: p2 size 327680 extends beyond EOD, truncated [ 143.853702][T15478] loop3: p2 size 327680 extends beyond EOD, truncated [ 143.870328][T15480] loop2: p4 size 2097152 extends beyond EOD, truncated [ 143.883321][T15454] loop5: detected capacity change from 0 to 2 [ 143.884716][T15478] FAULT_INJECTION: forcing a failure. [ 143.884716][T15478] name failslab, interval 1, probability 0, space 0, times 0 [ 143.902078][T15478] CPU: 0 PID: 15478 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 143.910839][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.920983][T15478] Call Trace: [ 143.924333][T15478] dump_stack+0x137/0x19d [ 143.928652][T15478] should_fail+0x23c/0x250 [ 143.933066][T15478] ? __kernfs_new_node+0x6a/0x330 [ 143.938094][T15478] __should_failslab+0x81/0x90 [ 143.943200][T15478] should_failslab+0x5/0x20 [ 143.947697][T15478] kmem_cache_alloc+0x46/0x300 [ 143.952445][T15478] __kernfs_new_node+0x6a/0x330 [ 143.957440][T15478] ? __cond_resched+0x11/0x40 [ 143.962231][T15478] ? mutex_lock+0x9/0x30 [ 143.966806][T15478] kernfs_new_node+0x5b/0xd0 [ 143.971406][T15478] __kernfs_create_file+0x45/0x1a0 [ 143.976503][T15478] sysfs_add_file_mode_ns+0x1c1/0x250 [ 143.981865][T15478] internal_create_group+0x2e4/0x850 [ 143.987234][T15478] sysfs_create_groups+0x3d/0xf0 [ 143.992169][T15478] device_add+0x4dc/0xe50 [ 143.996510][T15478] add_partition+0x35b/0x580 [ 144.001120][T15478] blk_add_partitions+0x583/0xa80 [ 144.006144][T15478] bdev_disk_changed+0x1a7/0x200 [ 144.011137][T15478] loop_set_status+0x75f/0x7e0 [ 144.015883][T15478] lo_ioctl+0x758/0x11f0 [ 144.020114][T15478] ? path_openat+0x19ab/0x20b0 [ 144.024944][T15478] ? putname+0xa5/0xc0 [ 144.029018][T15478] ? ___cache_free+0x3c/0x300 [ 144.033691][T15478] ? blkdev_common_ioctl+0x9c3/0x1010 [ 144.039063][T15478] ? selinux_file_ioctl+0x8e0/0x970 [ 144.044325][T15478] ? lo_release+0x120/0x120 [ 144.048859][T15478] blkdev_ioctl+0x1d0/0x3c0 [ 144.053388][T15478] block_ioctl+0x6d/0x80 [ 144.057619][T15478] ? blkdev_iopoll+0x70/0x70 [ 144.062193][T15478] __se_sys_ioctl+0xcb/0x140 01:33:41 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 144.066772][T15478] __x64_sys_ioctl+0x3f/0x50 [ 144.071346][T15478] do_syscall_64+0x34/0x50 [ 144.075785][T15478] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 144.081834][T15478] RIP: 0033:0x466217 [ 144.085814][T15478] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 144.105521][T15478] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 144.113940][T15478] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 144.121904][T15478] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 144.129994][T15478] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 144.137966][T15478] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 144.146114][T15478] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 144.155841][T15478] loop3: p2 could not be added: 12 01:33:41 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:41 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:41 executing program 3 (fault-call:0 fault-nth:66): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 144.161073][T15478] loop3: p4 size 2097152 extends beyond EOD, truncated [ 144.176249][T15454] loop5: p2 p4 [ 144.186950][T15454] loop5: p2 size 327680 extends beyond EOD, truncated [ 144.196851][T15504] loop0: detected capacity change from 0 to 1 [ 144.202013][T15525] loop1: detected capacity change from 0 to 5 [ 144.209473][T15454] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:42 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x589d, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 144.217192][T15530] loop2: detected capacity change from 0 to 1 [ 144.242271][T15543] loop3: detected capacity change from 0 to 1 [ 144.249041][T15504] loop0: p2 p4 [ 144.253152][T15504] loop0: p2 size 327680 extends beyond EOD, truncated [ 144.261146][T15525] loop1: p2 p4 01:33:42 executing program 5: syz_read_part_table(0x600, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 144.264784][T15525] loop1: p2 size 327680 extends beyond EOD, truncated [ 144.265000][T15530] loop2: p2 p4 [ 144.272614][T15525] loop1: p4 size 2097152 extends beyond EOD, truncated [ 144.276014][ T1028] loop5: p2 p4 [ 144.285844][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 144.286977][T15530] loop2: p2 size 327680 extends beyond EOD, truncated [ 144.299827][T15543] loop3: p2 p4 [ 144.303401][T15543] loop3: p2 size 327680 extends beyond EOD, truncated [ 144.311283][T15530] loop2: p4 size 2097152 extends beyond EOD, truncated [ 144.318549][T15543] FAULT_INJECTION: forcing a failure. [ 144.318549][T15543] name failslab, interval 1, probability 0, space 0, times 0 [ 144.318557][T15504] loop0: p4 size 2097152 extends beyond EOD, [ 144.318572][T15543] CPU: 1 PID: 15543 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 144.331226][T15504] truncated [ 144.337231][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.337244][T15543] Call Trace: [ 144.337250][T15543] dump_stack+0x137/0x19d [ 144.366724][T15543] should_fail+0x23c/0x250 [ 144.371136][T15543] ? __kernfs_new_node+0x6a/0x330 [ 144.372612][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 144.376145][T15543] __should_failslab+0x81/0x90 [ 144.387738][T15543] should_failslab+0x5/0x20 [ 144.392300][T15543] kmem_cache_alloc+0x46/0x300 [ 144.397045][T15543] __kernfs_new_node+0x6a/0x330 [ 144.401935][T15543] ? __cond_resched+0x11/0x40 [ 144.406589][T15543] ? mutex_lock+0x9/0x30 [ 144.410807][T15543] kernfs_new_node+0x5b/0xd0 [ 144.415435][T15543] __kernfs_create_file+0x45/0x1a0 [ 144.420540][T15543] sysfs_add_file_mode_ns+0x1c1/0x250 [ 144.425947][T15543] internal_create_group+0x2e4/0x850 [ 144.431659][T15543] sysfs_create_groups+0x3d/0xf0 [ 144.436598][T15543] device_add+0x4dc/0xe50 [ 144.440913][T15543] add_partition+0x35b/0x580 [ 144.445491][T15543] blk_add_partitions+0x583/0xa80 [ 144.450507][T15543] bdev_disk_changed+0x1a7/0x200 [ 144.455427][T15543] loop_set_status+0x75f/0x7e0 [ 144.460242][T15543] lo_ioctl+0x758/0x11f0 [ 144.464516][T15543] ? path_openat+0x19ab/0x20b0 [ 144.469262][T15543] ? putname+0xa5/0xc0 [ 144.473397][T15543] ? ___cache_free+0x3c/0x300 [ 144.478131][T15543] ? blkdev_common_ioctl+0x9c3/0x1010 [ 144.483482][T15543] ? selinux_file_ioctl+0x8e0/0x970 [ 144.488684][T15543] ? lo_release+0x120/0x120 [ 144.493244][T15543] blkdev_ioctl+0x1d0/0x3c0 [ 144.497747][T15543] block_ioctl+0x6d/0x80 [ 144.501972][T15543] ? blkdev_iopoll+0x70/0x70 [ 144.506542][T15543] __se_sys_ioctl+0xcb/0x140 [ 144.511153][T15543] __x64_sys_ioctl+0x3f/0x50 01:33:42 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0xa7fb, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 144.515722][T15543] do_syscall_64+0x34/0x50 [ 144.520120][T15543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 144.526055][T15543] RIP: 0033:0x466217 [ 144.529938][T15543] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 144.549598][T15543] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 144.557986][T15543] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 144.566005][T15543] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 144.573964][T15543] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 144.581915][T15543] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 144.589874][T15543] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 144.605635][T15543] loop3: p2 could not be added: 12 [ 144.605849][T15525] loop1: detected capacity change from 0 to 5 01:33:42 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:42 executing program 0: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) 01:33:42 executing program 1: syz_read_part_table(0xbed, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:42 executing program 3 (fault-call:0 fault-nth:67): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 144.610991][T15543] loop3: p4 size 2097152 extends beyond EOD, truncated [ 144.626462][T15525] loop1: p2 p4 [ 144.630087][T15525] loop1: p2 size 327680 extends beyond EOD, truncated [ 144.638049][T15525] loop1: p4 size 2097152 extends beyond EOD, truncated [ 144.645426][T15579] loop5: detected capacity change from 0 to 3 [ 144.690748][ T1028] loop5: p2 p4 [ 144.694322][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 144.709178][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 144.723653][T15579] loop5: p2 p4 [ 144.727607][T15579] loop5: p2 size 327680 extends beyond EOD, truncated [ 144.732569][T15614] loop0: detected capacity change from 0 to 1 [ 144.740598][T15617] loop3: detected capacity change from 0 to 1 [ 144.740848][T15579] loop5: p4 size 2097152 extends beyond EOD, truncated [ 144.749924][T15613] loop2: detected capacity change from 0 to 1 [ 144.760317][T15622] loop1: detected capacity change from 0 to 5 [ 144.766665][T15617] loop3: p2 p4 [ 144.770187][T15617] loop3: p2 size 327680 extends beyond EOD, truncated [ 144.777144][T15617] FAULT_INJECTION: forcing a failure. [ 144.777144][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 144.785891][T15614] loop0: p2 p4 [ 144.789827][T15617] CPU: 0 PID: 15617 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 144.793310][T15614] loop0: p2 size 327680 extends beyond EOD, [ 144.801990][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.802004][T15617] Call Trace: [ 144.802012][T15617] dump_stack+0x137/0x19d [ 144.802034][T15617] should_fail+0x23c/0x250 [ 144.808100][T15614] truncated [ 144.818118][T15617] ? __kernfs_new_node+0x6a/0x330 [ 144.818140][T15617] __should_failslab+0x81/0x90 [ 144.823209][T15614] loop0: p4 size 2097152 extends beyond EOD, [ 144.825716][T15617] should_failslab+0x5/0x20 [ 144.825743][T15617] kmem_cache_alloc+0x46/0x300 [ 144.830132][T15614] truncated [ 144.833218][T15617] __kernfs_new_node+0x6a/0x330 [ 144.866091][T15617] ? __cond_resched+0x11/0x40 [ 144.870882][T15617] ? mutex_lock+0x9/0x30 [ 144.875117][T15617] kernfs_new_node+0x5b/0xd0 [ 144.879755][T15617] __kernfs_create_file+0x45/0x1a0 [ 144.884891][T15617] sysfs_add_file_mode_ns+0x1c1/0x250 [ 144.890282][T15617] internal_create_group+0x2e4/0x850 [ 144.895580][T15617] sysfs_create_groups+0x3d/0xf0 [ 144.900500][T15617] device_add+0x4dc/0xe50 [ 144.904849][T15617] add_partition+0x35b/0x580 [ 144.909423][T15617] blk_add_partitions+0x583/0xa80 [ 144.914506][T15617] bdev_disk_changed+0x1a7/0x200 [ 144.919422][T15617] loop_set_status+0x75f/0x7e0 [ 144.924175][T15617] lo_ioctl+0x758/0x11f0 [ 144.928397][T15617] ? path_openat+0x19ab/0x20b0 [ 144.933145][T15617] ? putname+0xa5/0xc0 [ 144.937195][T15617] ? ___cache_free+0x3c/0x300 [ 144.941906][T15617] ? blkdev_common_ioctl+0x9c3/0x1010 [ 144.947253][T15617] ? selinux_file_ioctl+0x8e0/0x970 [ 144.952436][T15617] ? lo_release+0x120/0x120 [ 144.956920][T15617] blkdev_ioctl+0x1d0/0x3c0 [ 144.961448][T15617] block_ioctl+0x6d/0x80 [ 144.965670][T15617] ? blkdev_iopoll+0x70/0x70 [ 144.970242][T15617] __se_sys_ioctl+0xcb/0x140 [ 144.974808][T15617] __x64_sys_ioctl+0x3f/0x50 [ 144.979447][T15617] do_syscall_64+0x34/0x50 [ 144.983845][T15617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 144.989797][T15617] RIP: 0033:0x466217 [ 144.993670][T15617] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.013331][T15617] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 145.021733][T15617] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 145.029701][T15617] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:42 executing program 5: syz_read_part_table(0x604, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 145.037675][T15617] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 145.045641][T15617] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 145.053598][T15617] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 145.062507][T15617] loop3: p2 could not be added: 12 [ 145.067813][T15617] loop3: p4 size 2097152 extends beyond EOD, truncated [ 145.076489][T15622] loop1: p2 p4 [ 145.077729][T15613] loop2: p2 p4 [ 145.083504][T15613] loop2: p2 size 327680 extends beyond EOD, truncated 01:33:42 executing program 3 (fault-call:0 fault-nth:68): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:42 executing program 2: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 145.091159][T15622] loop1: p2 size 327680 extends beyond EOD, truncated [ 145.099851][T15613] loop2: p4 size 2097152 extends beyond EOD, truncated [ 145.107438][T15622] loop1: p4 size 2097152 extends beyond EOD, truncated [ 145.116291][ T1028] loop2: p2 p4 [ 145.119839][ T1028] loop2: p2 size 327680 extends beyond EOD, truncated [ 145.120987][T15649] loop5: detected capacity change from 0 to 3 01:33:42 executing program 0: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) 01:33:42 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 145.136955][ T1028] loop2: p4 size 2097152 extends beyond EOD, truncated [ 145.162162][T15622] loop1: detected capacity change from 0 to 5 [ 145.169197][T15670] loop3: detected capacity change from 0 to 1 [ 145.176145][T15649] loop5: p2 p4 [ 145.185286][T15649] loop5: p2 size 327680 extends beyond EOD, truncated [ 145.192836][T15649] loop5: p4 size 2097152 extends beyond EOD, truncated [ 145.198827][T15682] loop2: detected capacity change from 0 to 1 [ 145.206748][ T1028] loop5: p2 p4 [ 145.211018][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 145.216155][T15622] loop1: p2 p4 [ 145.219992][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 145.224201][T15622] loop1: p2 size 327680 extends beyond EOD, truncated [ 145.229202][T15670] loop3: p2 p4 [ 145.238149][T15682] loop2: p2 p4 [ 145.241932][T15684] loop0: detected capacity change from 0 to 1 [ 145.242690][T15622] loop1: p4 size 2097152 extends beyond EOD, truncated [ 145.250388][T15682] loop2: p2 size 327680 extends beyond EOD, truncated [ 145.256600][T15670] loop3: p2 size 327680 extends beyond EOD, truncated [ 145.263352][T15682] loop2: p4 size 2097152 extends beyond EOD, truncated [ 145.269923][T15670] FAULT_INJECTION: forcing a failure. [ 145.269923][T15670] name failslab, interval 1, probability 0, space 0, times 0 [ 145.289401][T15670] CPU: 1 PID: 15670 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 145.298289][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.308527][T15670] Call Trace: [ 145.311790][T15670] dump_stack+0x137/0x19d [ 145.316184][T15670] should_fail+0x23c/0x250 [ 145.320616][T15670] ? __kernfs_new_node+0x6a/0x330 [ 145.325630][T15670] __should_failslab+0x81/0x90 [ 145.330404][T15670] should_failslab+0x5/0x20 [ 145.334901][T15670] kmem_cache_alloc+0x46/0x300 [ 145.339647][T15670] __kernfs_new_node+0x6a/0x330 [ 145.344499][T15670] ? __cond_resched+0x11/0x40 [ 145.349255][T15670] ? mutex_lock+0x9/0x30 [ 145.353476][T15670] kernfs_new_node+0x5b/0xd0 [ 145.358044][T15670] __kernfs_create_file+0x45/0x1a0 [ 145.363138][T15670] sysfs_add_file_mode_ns+0x1c1/0x250 [ 145.368489][T15670] internal_create_group+0x2e4/0x850 [ 145.373785][T15670] sysfs_create_groups+0x3d/0xf0 [ 145.378733][T15670] device_add+0x4dc/0xe50 [ 145.383044][T15670] add_partition+0x35b/0x580 [ 145.387625][T15670] blk_add_partitions+0x583/0xa80 [ 145.392659][T15670] bdev_disk_changed+0x1a7/0x200 [ 145.397579][T15670] loop_set_status+0x75f/0x7e0 [ 145.402327][T15670] lo_ioctl+0x758/0x11f0 [ 145.406688][T15670] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 145.412570][T15670] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.418746][T15670] ? putname+0xa5/0xc0 [ 145.422845][T15670] ? ___cache_free+0x3c/0x300 [ 145.427689][T15670] ? blkdev_common_ioctl+0x9c3/0x1010 [ 145.433059][T15670] ? selinux_file_ioctl+0x8e0/0x970 [ 145.438245][T15670] ? lo_release+0x120/0x120 [ 145.442792][T15670] blkdev_ioctl+0x1d0/0x3c0 [ 145.447301][T15670] block_ioctl+0x6d/0x80 [ 145.451536][T15670] ? blkdev_iopoll+0x70/0x70 [ 145.456182][T15670] __se_sys_ioctl+0xcb/0x140 [ 145.460754][T15670] __x64_sys_ioctl+0x3f/0x50 [ 145.465321][T15670] do_syscall_64+0x34/0x50 [ 145.469717][T15670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.475593][T15670] RIP: 0033:0x466217 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 145.479464][T15670] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.499062][T15670] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 145.507451][T15670] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 145.515443][T15670] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 145.523394][T15670] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 145.531355][T15670] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 01:33:43 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 145.539305][T15670] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 145.555954][T15684] loop0: p2 p4 [ 145.556735][T15670] loop3: p2 could not be added: 12 [ 145.562811][T15684] loop0: p2 size 327680 extends beyond EOD, [ 145.564634][T15670] loop3: p4 size 2097152 extends beyond EOD, truncated [ 145.577579][T15684] truncated 01:33:43 executing program 1: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:43 executing program 3 (fault-call:0 fault-nth:69): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, 0x0, 0x0) [ 145.590121][T15684] loop0: p4 size 2097152 extends beyond EOD, truncated [ 145.603229][T15649] loop5: detected capacity change from 0 to 3 [ 145.634809][T15736] loop2: detected capacity change from 0 to 1 [ 145.656082][ T1028] loop5: p2 p4 [ 145.659670][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 145.666912][T15738] loop3: detected capacity change from 0 to 1 [ 145.675915][T15736] loop2: p2 p4 [ 145.680299][T15736] loop2: p2 size 327680 extends beyond EOD, truncated [ 145.683488][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 145.705736][T15736] loop2: p4 size 2097152 extends beyond EOD, truncated [ 145.713612][T15649] loop5: p2 p4 [ 145.717404][T15738] loop3: p2 p4 [ 145.721089][T15738] loop3: p2 size 327680 extends beyond EOD, truncated [ 145.728296][T15738] FAULT_INJECTION: forcing a failure. [ 145.728296][T15738] name failslab, interval 1, probability 0, space 0, times 0 [ 145.729318][T15649] loop5: p2 size 327680 extends beyond EOD, truncated [ 145.740972][T15738] CPU: 1 PID: 15738 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 01:33:43 executing program 5: syz_read_part_table(0x700, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:43 executing program 0: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 145.756508][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.765772][T15766] loop1: detected capacity change from 0 to 5 [ 145.766570][T15738] Call Trace: [ 145.766579][T15738] dump_stack+0x137/0x19d [ 145.775335][T15649] loop5: p4 size 2097152 extends beyond EOD, [ 145.775960][T15738] should_fail+0x23c/0x250 [ 145.775980][T15738] ? __kernfs_new_node+0x6a/0x330 [ 145.780304][T15649] truncated [ 145.786322][T15738] __should_failslab+0x81/0x90 [ 145.786346][T15738] should_failslab+0x5/0x20 [ 145.809024][T15738] kmem_cache_alloc+0x46/0x300 [ 145.813785][T15738] __kernfs_new_node+0x6a/0x330 [ 145.815362][T15783] loop0: detected capacity change from 0 to 1 [ 145.818633][T15738] ? __cond_resched+0x11/0x40 [ 145.818655][T15738] ? mutex_lock+0x9/0x30 [ 145.818671][T15738] kernfs_new_node+0x5b/0xd0 [ 145.838136][T15738] __kernfs_create_file+0x45/0x1a0 [ 145.843235][T15738] sysfs_add_file_mode_ns+0x1c1/0x250 [ 145.848630][T15738] internal_create_group+0x2e4/0x850 [ 145.853910][T15738] sysfs_create_groups+0x3d/0xf0 [ 145.858831][T15738] device_add+0x4dc/0xe50 [ 145.863219][T15738] add_partition+0x35b/0x580 [ 145.867787][T15738] blk_add_partitions+0x583/0xa80 [ 145.872876][T15738] bdev_disk_changed+0x1a7/0x200 [ 145.877890][T15738] loop_set_status+0x75f/0x7e0 [ 145.882684][T15738] lo_ioctl+0x758/0x11f0 [ 145.886926][T15738] ? path_openat+0x19ab/0x20b0 [ 145.891675][T15738] ? putname+0xa5/0xc0 [ 145.895734][T15738] ? ___cache_free+0x3c/0x300 [ 145.900388][T15738] ? blkdev_common_ioctl+0x9c3/0x1010 [ 145.905739][T15738] ? selinux_file_ioctl+0x8e0/0x970 [ 145.910931][T15738] ? lo_release+0x120/0x120 [ 145.915507][T15738] blkdev_ioctl+0x1d0/0x3c0 [ 145.919990][T15738] block_ioctl+0x6d/0x80 [ 145.924228][T15738] ? blkdev_iopoll+0x70/0x70 [ 145.928805][T15738] __se_sys_ioctl+0xcb/0x140 [ 145.933374][T15738] __x64_sys_ioctl+0x3f/0x50 [ 145.937998][T15738] do_syscall_64+0x34/0x50 [ 145.942397][T15738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.948552][T15738] RIP: 0033:0x466217 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 145.952433][T15738] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.972077][T15738] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 145.980470][T15738] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 145.988439][T15738] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 145.996479][T15738] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 01:33:43 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 146.004446][T15738] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 146.012396][T15738] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 146.021116][T15738] loop3: p2 could not be added: 12 [ 146.026360][T15738] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:43 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:43 executing program 3 (fault-call:0 fault-nth:70): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 146.061352][T15766] loop1: p2 p4 [ 146.061352][T15783] loop0: p2 p4 [ 146.061478][T15766] loop1: p2 size 327680 extends beyond EOD, [ 146.065035][T15783] loop0: p2 size 327680 extends beyond EOD, [ 146.068430][T15766] truncated [ 146.073518][T15766] loop1: p4 size 2097152 extends beyond EOD, [ 146.074699][T15783] truncated [ 146.081557][T15783] loop0: p4 size 2097152 extends beyond EOD, [ 146.083847][T15766] truncated [ 146.102234][T15783] truncated [ 146.150226][T15766] loop1: detected capacity change from 0 to 5 [ 146.154788][T15822] loop5: detected capacity change from 0 to 3 [ 146.159847][T15831] loop3: detected capacity change from 0 to 1 [ 146.185936][T15766] loop1: p2 p4 [ 146.189527][T15766] loop1: p2 size 327680 extends beyond EOD, truncated [ 146.196637][T15831] loop3: p2 p4 [ 146.203120][T15766] loop1: p4 size 2097152 extends beyond EOD, truncated [ 146.207753][T15831] loop3: p2 size 327680 extends beyond EOD, truncated [ 146.217027][T15822] loop5: p2 p4 [ 146.217167][T15831] FAULT_INJECTION: forcing a failure. [ 146.217167][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 146.220705][T15822] loop5: p2 size 327680 extends beyond EOD, [ 146.233093][T15831] CPU: 0 PID: 15831 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 146.239093][T15822] truncated [ 146.251004][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.261079][T15831] Call Trace: [ 146.264346][T15831] dump_stack+0x137/0x19d [ 146.268667][T15831] should_fail+0x23c/0x250 [ 146.273074][T15831] ? __kernfs_new_node+0x6a/0x330 [ 146.278093][T15831] __should_failslab+0x81/0x90 [ 146.282854][T15831] should_failslab+0x5/0x20 [ 146.287343][T15831] kmem_cache_alloc+0x46/0x300 [ 146.292117][T15831] __kernfs_new_node+0x6a/0x330 [ 146.296954][T15831] ? __cond_resched+0x11/0x40 [ 146.301617][T15831] ? mutex_lock+0x9/0x30 [ 146.305851][T15831] kernfs_new_node+0x5b/0xd0 [ 146.310469][T15831] __kernfs_create_file+0x45/0x1a0 [ 146.315670][T15831] sysfs_add_file_mode_ns+0x1c1/0x250 [ 146.321046][T15831] internal_create_group+0x2e4/0x850 [ 146.326405][T15831] sysfs_create_groups+0x3d/0xf0 [ 146.331338][T15831] device_add+0x4dc/0xe50 [ 146.335699][T15831] add_partition+0x35b/0x580 [ 146.340269][T15831] blk_add_partitions+0x583/0xa80 [ 146.345272][T15831] bdev_disk_changed+0x1a7/0x200 [ 146.350212][T15831] loop_set_status+0x75f/0x7e0 [ 146.355061][T15831] lo_ioctl+0x758/0x11f0 [ 146.359286][T15831] ? path_openat+0x19ab/0x20b0 [ 146.364046][T15831] ? putname+0xa5/0xc0 [ 146.368116][T15831] ? ___cache_free+0x3c/0x300 [ 146.372771][T15831] ? blkdev_common_ioctl+0x9c3/0x1010 [ 146.378133][T15831] ? selinux_file_ioctl+0x8e0/0x970 [ 146.383313][T15831] ? lo_release+0x120/0x120 [ 146.387821][T15831] blkdev_ioctl+0x1d0/0x3c0 [ 146.392351][T15831] block_ioctl+0x6d/0x80 [ 146.396646][T15831] ? blkdev_iopoll+0x70/0x70 [ 146.401230][T15831] __se_sys_ioctl+0xcb/0x140 [ 146.405799][T15831] __x64_sys_ioctl+0x3f/0x50 [ 146.410367][T15831] do_syscall_64+0x34/0x50 [ 146.414777][T15831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.420692][T15831] RIP: 0033:0x466217 [ 146.424637][T15831] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 146.444224][T15831] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 146.452642][T15831] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 146.460608][T15831] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 146.468575][T15831] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 146.476556][T15831] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 146.484527][T15831] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 146.493754][T15831] loop3: p2 could not be added: 12 01:33:44 executing program 1: syz_read_part_table(0xc00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:44 executing program 0: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) 01:33:44 executing program 3 (fault-call:0 fault-nth:71): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 146.499010][T15831] loop3: p4 size 2097152 extends beyond EOD, truncated [ 146.512422][T15822] loop5: p4 size 2097152 extends beyond EOD, truncated [ 146.568093][T15822] loop5: detected capacity change from 0 to 3 [ 146.605884][T15875] loop0: detected capacity change from 0 to 1 [ 146.607838][T15822] loop5: p2 p4 01:33:44 executing program 5: syz_read_part_table(0x900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 146.613268][T15879] loop3: detected capacity change from 0 to 1 [ 146.619638][T15822] loop5: p2 size 327680 extends beyond EOD, truncated [ 146.629709][T15822] loop5: p4 size 2097152 extends beyond EOD, truncated [ 146.645885][T15879] loop3: p2 p4 [ 146.649234][T15898] loop1: detected capacity change from 0 to 6 [ 146.649556][T15875] loop0: p2 p4 [ 146.656731][T15879] loop3: p2 size 327680 extends beyond EOD, truncated 01:33:44 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 146.659354][T15875] loop0: p2 size 327680 extends beyond EOD, truncated [ 146.671434][T15879] FAULT_INJECTION: forcing a failure. [ 146.671434][T15879] name failslab, interval 1, probability 0, space 0, times 0 [ 146.685215][T15879] CPU: 1 PID: 15879 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 146.694055][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.697899][T15875] loop0: p4 size 2097152 extends beyond EOD, [ 146.704097][T15879] Call Trace: [ 146.704106][T15879] dump_stack+0x137/0x19d 01:33:44 executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 146.710182][T15875] truncated [ 146.713437][T15879] should_fail+0x23c/0x250 [ 146.725237][T15879] ? __kernfs_new_node+0x6a/0x330 [ 146.730260][T15879] __should_failslab+0x81/0x90 [ 146.735105][T15879] should_failslab+0x5/0x20 [ 146.739683][T15879] kmem_cache_alloc+0x46/0x300 [ 146.744461][T15879] __kernfs_new_node+0x6a/0x330 [ 146.749317][T15879] ? __cond_resched+0x11/0x40 [ 146.754025][T15879] ? mutex_lock+0x9/0x30 [ 146.758313][T15879] kernfs_new_node+0x5b/0xd0 [ 146.762910][T15879] __kernfs_create_file+0x45/0x1a0 [ 146.768029][T15879] sysfs_add_file_mode_ns+0x1c1/0x250 [ 146.773477][T15879] internal_create_group+0x2e4/0x850 [ 146.778804][T15879] sysfs_create_groups+0x3d/0xf0 [ 146.783759][T15879] device_add+0x4dc/0xe50 [ 146.788119][T15879] add_partition+0x35b/0x580 [ 146.792699][T15879] blk_add_partitions+0x583/0xa80 [ 146.797728][T15879] bdev_disk_changed+0x1a7/0x200 [ 146.802908][T15879] loop_set_status+0x75f/0x7e0 [ 146.807657][T15879] lo_ioctl+0x758/0x11f0 [ 146.811995][T15879] ? path_openat+0x19ab/0x20b0 [ 146.816768][T15879] ? putname+0xa5/0xc0 [ 146.820899][T15879] ? ___cache_free+0x3c/0x300 [ 146.825577][T15879] ? blkdev_common_ioctl+0x9c3/0x1010 [ 146.831041][T15879] ? selinux_file_ioctl+0x8e0/0x970 [ 146.836276][T15879] ? lo_release+0x120/0x120 [ 146.840843][T15879] blkdev_ioctl+0x1d0/0x3c0 [ 146.845338][T15879] block_ioctl+0x6d/0x80 [ 146.849587][T15879] ? blkdev_iopoll+0x70/0x70 [ 146.854367][T15879] __se_sys_ioctl+0xcb/0x140 [ 146.859077][T15879] __x64_sys_ioctl+0x3f/0x50 [ 146.863743][T15879] do_syscall_64+0x34/0x50 [ 146.868241][T15879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.875002][T15879] RIP: 0033:0x466217 [ 146.878873][T15879] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 146.898520][T15879] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 146.906937][T15879] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 146.914889][T15879] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 146.922855][T15879] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 146.930804][T15879] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 146.938771][T15879] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 146.947280][T15879] loop3: p2 could not be added: 12 [ 146.952544][T15879] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:44 executing program 3 (fault-call:0 fault-nth:72): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) 01:33:44 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 146.975541][T15898] loop1: p2 p4 [ 146.979195][T15898] loop1: p2 size 327680 extends beyond EOD, truncated [ 146.994550][T15898] loop1: p4 size 2097152 extends beyond EOD, truncated [ 147.025935][T15936] loop5: detected capacity change from 0 to 4 [ 147.051538][T15942] loop0: detected capacity change from 0 to 1 [ 147.065934][T15946] loop3: detected capacity change from 0 to 1 01:33:44 executing program 1: syz_read_part_table(0xd00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:44 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 147.098159][T15946] loop3: p2 p4 [ 147.101895][T15946] loop3: p2 size 327680 extends beyond EOD, truncated [ 147.109093][T15942] loop0: p2 p4 [ 147.109680][T15946] FAULT_INJECTION: forcing a failure. [ 147.109680][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 147.112655][T15942] loop0: p2 size 327680 extends beyond EOD, [ 147.125232][T15946] CPU: 1 PID: 15946 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 147.125254][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.131230][T15942] truncated [ 147.139949][T15946] Call Trace: [ 147.139958][T15946] dump_stack+0x137/0x19d [ 147.160698][T15946] should_fail+0x23c/0x250 [ 147.165120][T15946] ? __kernfs_new_node+0x6a/0x330 [ 147.170269][T15946] __should_failslab+0x81/0x90 [ 147.175045][T15946] should_failslab+0x5/0x20 [ 147.179553][T15946] kmem_cache_alloc+0x46/0x300 [ 147.184315][T15946] ? __cond_resched+0x11/0x40 [ 147.188998][T15946] __kernfs_new_node+0x6a/0x330 [ 147.193837][T15946] ? __kernfs_create_file+0x189/0x1a0 [ 147.200501][T15946] kernfs_create_dir_ns+0x5e/0x140 [ 147.205662][T15946] internal_create_group+0x138/0x850 [ 147.211111][T15946] sysfs_create_groups+0x3d/0xf0 [ 147.216032][T15946] device_add+0x4dc/0xe50 [ 147.220343][T15946] add_partition+0x35b/0x580 [ 147.224923][T15946] blk_add_partitions+0x583/0xa80 [ 147.229942][T15946] bdev_disk_changed+0x1a7/0x200 [ 147.234860][T15946] loop_set_status+0x75f/0x7e0 [ 147.239656][T15946] lo_ioctl+0x758/0x11f0 [ 147.243880][T15946] ? path_openat+0x19ab/0x20b0 [ 147.248673][T15946] ? putname+0xa5/0xc0 [ 147.252722][T15946] ? ___cache_free+0x3c/0x300 [ 147.257378][T15946] ? blkdev_common_ioctl+0x9c3/0x1010 [ 147.262738][T15946] ? selinux_file_ioctl+0x8e0/0x970 [ 147.268356][T15946] ? lo_release+0x120/0x120 [ 147.272845][T15946] blkdev_ioctl+0x1d0/0x3c0 [ 147.277403][T15946] block_ioctl+0x6d/0x80 [ 147.281628][T15946] ? blkdev_iopoll+0x70/0x70 [ 147.286286][T15946] __se_sys_ioctl+0xcb/0x140 [ 147.290881][T15946] __x64_sys_ioctl+0x3f/0x50 [ 147.295457][T15946] do_syscall_64+0x34/0x50 [ 147.299860][T15946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.305779][T15946] RIP: 0033:0x466217 [ 147.309677][T15946] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.329402][T15946] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 147.337795][T15946] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 147.345746][T15946] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 147.353878][T15946] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 147.361917][T15946] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 147.369873][T15946] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 147.378497][T15946] loop3: p2 could not be added: 12 [ 147.383700][T15946] loop3: p4 size 2097152 extends beyond EOD, truncated [ 147.384363][T15936] loop5: p2 p4 01:33:45 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:45 executing program 3 (fault-call:0 fault-nth:73): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 147.395187][T15936] loop5: p2 size 327680 extends beyond EOD, truncated [ 147.412344][T15936] loop5: p4 size 2097152 extends beyond EOD, truncated [ 147.414647][T15973] loop1: detected capacity change from 0 to 6 [ 147.424851][T15942] loop0: p4 size 2097152 extends beyond EOD, truncated [ 147.457279][ T1028] loop1: p2 p4 [ 147.460951][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 147.471106][T15936] loop5: detected capacity change from 0 to 4 [ 147.486370][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 147.487643][T16001] loop3: detected capacity change from 0 to 1 [ 147.500999][T15973] loop1: p2 p4 [ 147.504529][T15973] loop1: p2 size 327680 extends beyond EOD, truncated [ 147.511966][T15973] loop1: p4 size 2097152 extends beyond EOD, truncated [ 147.519269][T15936] loop5: p2 p4 [ 147.522780][T15936] loop5: p2 size 327680 extends beyond EOD, truncated [ 147.530227][T15936] loop5: p4 size 2097152 extends beyond EOD, truncated [ 147.535769][T16001] loop3: p2 p4 [ 147.540615][T16001] loop3: p2 size 327680 extends beyond EOD, truncated [ 147.547900][T16001] FAULT_INJECTION: forcing a failure. [ 147.547900][T16001] name failslab, interval 1, probability 0, space 0, times 0 [ 147.560735][T16001] CPU: 0 PID: 16001 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 147.569503][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.579555][T16001] Call Trace: [ 147.582885][T16001] dump_stack+0x137/0x19d [ 147.587310][T16001] should_fail+0x23c/0x250 [ 147.591775][T16001] ? __kernfs_new_node+0x6a/0x330 [ 147.596795][T16001] __should_failslab+0x81/0x90 [ 147.601681][T16001] should_failslab+0x5/0x20 [ 147.606195][T16001] kmem_cache_alloc+0x46/0x300 [ 147.610983][T16001] ? __cond_resched+0x11/0x40 [ 147.615642][T16001] __kernfs_new_node+0x6a/0x330 [ 147.620490][T16001] ? __kernfs_create_file+0x189/0x1a0 [ 147.625841][T16001] kernfs_create_dir_ns+0x5e/0x140 [ 147.630937][T16001] internal_create_group+0x138/0x850 [ 147.636217][T16001] sysfs_create_groups+0x3d/0xf0 [ 147.641182][T16001] device_add+0x4dc/0xe50 [ 147.645603][T16001] add_partition+0x35b/0x580 [ 147.650241][T16001] blk_add_partitions+0x583/0xa80 [ 147.655299][T16001] bdev_disk_changed+0x1a7/0x200 [ 147.660235][T16001] loop_set_status+0x75f/0x7e0 [ 147.664982][T16001] lo_ioctl+0x758/0x11f0 [ 147.669240][T16001] ? path_openat+0x19ab/0x20b0 [ 147.674049][T16001] ? putname+0xa5/0xc0 [ 147.678098][T16001] ? ___cache_free+0x3c/0x300 [ 147.682819][T16001] ? blkdev_common_ioctl+0x9c3/0x1010 [ 147.688219][T16001] ? selinux_file_ioctl+0x8e0/0x970 [ 147.693401][T16001] ? lo_release+0x120/0x120 [ 147.697894][T16001] blkdev_ioctl+0x1d0/0x3c0 [ 147.702381][T16001] block_ioctl+0x6d/0x80 [ 147.706614][T16001] ? blkdev_iopoll+0x70/0x70 [ 147.711187][T16001] __se_sys_ioctl+0xcb/0x140 [ 147.715795][T16001] __x64_sys_ioctl+0x3f/0x50 [ 147.720397][T16001] do_syscall_64+0x34/0x50 [ 147.724791][T16001] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.730678][T16001] RIP: 0033:0x466217 [ 147.734546][T16001] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.754439][T16001] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 147.762842][T16001] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 147.770809][T16001] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 147.778783][T16001] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 147.786777][T16001] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 147.794726][T16001] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:45 executing program 5: syz_read_part_table(0x90e, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:45 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) 01:33:45 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:45 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:45 executing program 1: syz_read_part_table(0xe00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:45 executing program 3 (fault-call:0 fault-nth:74): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:45 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 147.805660][T16001] loop3: p2 could not be added: 12 [ 147.810909][T16001] loop3: p4 size 2097152 extends beyond EOD, truncated [ 147.821760][ T1028] loop3: p2 p4 [ 147.825377][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 147.833135][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:45 executing program 4: r0 = io_uring_setup(0x3560, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 147.863441][T16037] loop1: detected capacity change from 0 to 7 [ 147.892155][T16054] loop5: detected capacity change from 0 to 4 [ 147.892171][T16052] loop3: detected capacity change from 0 to 1 01:33:45 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 147.925769][T16037] loop1: p2 p4 [ 147.926061][T16054] loop5: p2 p4 [ 147.932813][T16054] loop5: p2 size 327680 extends beyond EOD, truncated [ 147.936419][T16037] loop1: p2 size 327680 extends beyond EOD, truncated [ 147.940638][T16054] loop5: p4 size 2097152 extends beyond EOD, truncated [ 147.946650][T16052] loop3: p2 p4 [ 147.963470][T16052] loop3: p2 size 327680 extends beyond EOD, truncated 01:33:45 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:45 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 147.972512][T16037] loop1: p4 size 2097152 extends beyond EOD, truncated [ 147.983755][T16052] FAULT_INJECTION: forcing a failure. [ 147.983755][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 147.996664][T16052] CPU: 0 PID: 16052 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 148.005428][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.015635][T16052] Call Trace: [ 148.018909][T16052] dump_stack+0x137/0x19d [ 148.023243][T16052] should_fail+0x23c/0x250 [ 148.027640][T16052] ? __kernfs_new_node+0x6a/0x330 [ 148.032684][T16052] __should_failslab+0x81/0x90 [ 148.037557][T16052] should_failslab+0x5/0x20 [ 148.042060][T16052] kmem_cache_alloc+0x46/0x300 [ 148.046802][T16052] ? __cond_resched+0x11/0x40 [ 148.051483][T16052] __kernfs_new_node+0x6a/0x330 [ 148.056340][T16052] ? idr_alloc_cyclic+0x249/0x2d0 [ 148.061420][T16052] ? rb_insert_color+0x7e/0x310 [ 148.066256][T16052] kernfs_new_node+0x5b/0xd0 [ 148.070831][T16052] __kernfs_create_file+0x45/0x1a0 [ 148.075925][T16052] sysfs_add_file_mode_ns+0x1c1/0x250 [ 148.081284][T16052] internal_create_group+0x2e4/0x850 [ 148.086558][T16052] sysfs_create_groups+0x3d/0xf0 [ 148.091544][T16052] device_add+0x4dc/0xe50 [ 148.095862][T16052] add_partition+0x35b/0x580 [ 148.100441][T16052] blk_add_partitions+0x583/0xa80 [ 148.105446][T16052] bdev_disk_changed+0x1a7/0x200 [ 148.110361][T16052] loop_set_status+0x75f/0x7e0 [ 148.115146][T16052] lo_ioctl+0x758/0x11f0 [ 148.119426][T16052] ? path_openat+0x19ab/0x20b0 [ 148.124174][T16052] ? putname+0xa5/0xc0 [ 148.128238][T16052] ? ___cache_free+0x3c/0x300 [ 148.132903][T16052] ? blkdev_common_ioctl+0x9c3/0x1010 [ 148.138287][T16052] ? selinux_file_ioctl+0x8e0/0x970 [ 148.143468][T16052] ? lo_release+0x120/0x120 [ 148.147954][T16052] blkdev_ioctl+0x1d0/0x3c0 [ 148.152443][T16052] block_ioctl+0x6d/0x80 [ 148.156741][T16052] ? blkdev_iopoll+0x70/0x70 [ 148.161358][T16052] __se_sys_ioctl+0xcb/0x140 [ 148.165968][T16052] __x64_sys_ioctl+0x3f/0x50 [ 148.170558][T16052] do_syscall_64+0x34/0x50 [ 148.174960][T16052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.180847][T16052] RIP: 0033:0x466217 [ 148.184716][T16052] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.205361][T16052] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 148.213789][T16052] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 01:33:46 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 148.221833][T16052] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 148.229792][T16052] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 148.237746][T16052] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 148.245711][T16052] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 148.260494][T16052] loop3: p2 could not be added: 12 [ 148.265926][T16052] loop3: p4 size 2097152 extends beyond EOD, truncated [ 148.278428][T16054] loop5: detected capacity change from 0 to 4 [ 148.288124][T16037] loop1: detected capacity change from 0 to 7 [ 148.294915][T16077] loop0: detected capacity change from 0 to 5 [ 148.326079][ T1028] loop1: p2 p4 [ 148.329925][T16077] loop0: p2 p4 [ 148.329925][T16054] loop5: p2 p4 [ 148.329979][T16054] loop5: p2 size 327680 extends beyond EOD, [ 148.333465][T16077] loop0: p2 size 327680 extends beyond EOD, [ 148.336930][T16054] truncated [ 148.337421][ T1028] loop1: p2 size 327680 extends beyond EOD, [ 148.342888][T16077] truncated [ 148.346598][T16077] loop0: p4 size 2097152 extends beyond EOD, [ 148.348919][ T1028] truncated [ 148.351993][T16077] truncated 01:33:46 executing program 5: syz_read_part_table(0xa00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 3 (fault-call:0 fault-nth:75): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:46 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 1: syz_read_part_table(0xf00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 148.375364][T16054] loop5: p4 size 2097152 extends beyond EOD, truncated [ 148.383517][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 148.395966][T16037] loop1: p2 p4 [ 148.399780][T16037] loop1: p2 size 327680 extends beyond EOD, truncated [ 148.416044][T16037] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:46 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 148.469462][T16131] loop3: detected capacity change from 0 to 1 [ 148.476451][T16128] loop0: detected capacity change from 0 to 5 [ 148.499043][T16142] loop5: detected capacity change from 0 to 5 [ 148.506610][T16128] loop0: p2 p4 01:33:46 executing program 4: io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 148.517944][T16149] loop2: detected capacity change from 0 to 1 [ 148.524358][T16131] loop3: p2 p4 [ 148.528443][T16128] loop0: p2 size 327680 extends beyond EOD, truncated [ 148.535276][T16131] loop3: p2 size 327680 extends beyond EOD, truncated [ 148.543800][T16128] loop0: p4 size 2097152 extends beyond EOD, truncated [ 148.545738][T16131] FAULT_INJECTION: forcing a failure. [ 148.545738][T16131] name failslab, interval 1, probability 0, space 0, times 0 [ 148.563300][T16131] CPU: 0 PID: 16131 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 148.570069][ T1028] loop5: p2 p4 [ 148.572061][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.572074][T16131] Call Trace: [ 148.572081][T16131] dump_stack+0x137/0x19d [ 148.575740][ T1028] loop5: p2 size 327680 extends beyond EOD, [ 148.585562][T16131] should_fail+0x23c/0x250 [ 148.585592][T16131] ? __kernfs_new_node+0x6a/0x330 [ 148.588867][ T1028] truncated [ 148.591268][ T1028] loop5: p4 size 2097152 extends beyond EOD, [ 148.593171][T16131] __should_failslab+0x81/0x90 [ 148.593195][T16131] should_failslab+0x5/0x20 [ 148.593214][T16131] kmem_cache_alloc+0x46/0x300 [ 148.599202][ T1028] truncated [ 148.603576][T16131] ? __cond_resched+0x11/0x40 [ 148.639746][T16131] __kernfs_new_node+0x6a/0x330 [ 148.644687][T16131] ? idr_alloc_cyclic+0x249/0x2d0 [ 148.649699][T16131] ? rb_insert_color+0x7e/0x310 [ 148.654556][T16131] kernfs_new_node+0x5b/0xd0 [ 148.659126][T16131] __kernfs_create_file+0x45/0x1a0 [ 148.664340][T16131] sysfs_add_file_mode_ns+0x1c1/0x250 [ 148.669725][T16131] internal_create_group+0x2e4/0x850 [ 148.675056][T16131] sysfs_create_groups+0x3d/0xf0 [ 148.680018][T16131] device_add+0x4dc/0xe50 [ 148.684371][T16131] add_partition+0x35b/0x580 [ 148.689028][T16131] blk_add_partitions+0x583/0xa80 [ 148.694030][T16131] bdev_disk_changed+0x1a7/0x200 [ 148.698946][T16131] loop_set_status+0x75f/0x7e0 [ 148.703709][T16131] lo_ioctl+0x758/0x11f0 [ 148.707941][T16131] ? path_openat+0x19ab/0x20b0 [ 148.712791][T16131] ? putname+0xa5/0xc0 [ 148.716878][T16131] ? ___cache_free+0x3c/0x300 [ 148.721578][T16131] ? blkdev_common_ioctl+0x9c3/0x1010 [ 148.727071][T16131] ? selinux_file_ioctl+0x8e0/0x970 [ 148.732255][T16131] ? lo_release+0x120/0x120 [ 148.736792][T16131] blkdev_ioctl+0x1d0/0x3c0 [ 148.741280][T16131] block_ioctl+0x6d/0x80 [ 148.745520][T16131] ? blkdev_iopoll+0x70/0x70 [ 148.750097][T16131] __se_sys_ioctl+0xcb/0x140 [ 148.754664][T16131] __x64_sys_ioctl+0x3f/0x50 [ 148.759231][T16131] do_syscall_64+0x34/0x50 [ 148.763768][T16131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.769658][T16131] RIP: 0033:0x466217 [ 148.773603][T16131] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.793335][T16131] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 148.801795][T16131] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 148.809745][T16131] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:46 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 148.817700][T16131] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 148.825661][T16131] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 148.833612][T16131] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 148.842690][T16131] loop3: p2 could not be added: 12 [ 148.847929][T16131] loop3: p4 size 2097152 extends beyond EOD, truncated [ 148.861675][T16168] loop1: detected capacity change from 0 to 7 01:33:46 executing program 3 (fault-call:0 fault-nth:76): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:46 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) [ 148.862185][T16142] loop5: p2 p4 [ 148.876457][T16142] loop5: p2 size 327680 extends beyond EOD, truncated [ 148.890125][T16142] loop5: p4 size 2097152 extends beyond EOD, truncated [ 148.905929][T16168] loop1: p2 p4 [ 148.909888][T16168] loop1: p2 size 327680 extends beyond EOD, truncated [ 148.924821][T16168] loop1: p4 size 2097152 extends beyond EOD, truncated [ 148.947071][T16201] loop0: detected capacity change from 0 to 5 [ 148.985968][T16201] loop0: p2 p4 [ 148.989544][T16201] loop0: p2 size 327680 extends beyond EOD, truncated [ 148.997013][T16201] loop0: p4 size 2097152 extends beyond EOD, truncated [ 149.001825][T16206] loop3: detected capacity change from 0 to 1 [ 149.009370][T16168] loop1: detected capacity change from 0 to 7 [ 149.011888][T16142] loop5: detected capacity change from 0 to 5 [ 149.045724][T16206] loop3: p2 p4 [ 149.049324][T16206] loop3: p2 size 327680 extends beyond EOD, truncated [ 149.056633][T16142] loop5: p2 p4 [ 149.060199][T16142] loop5: p2 size 327680 extends beyond EOD, truncated [ 149.067627][T16206] FAULT_INJECTION: forcing a failure. [ 149.067627][T16206] name failslab, interval 1, probability 0, space 0, times 0 [ 149.080257][T16206] CPU: 0 PID: 16206 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 149.084128][T16142] loop5: p4 size 2097152 extends beyond EOD, [ 149.089037][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.095201][T16142] truncated [ 149.097290][T16168] loop1: p2 p4 [ 149.106199][T16206] Call Trace: [ 149.106210][T16206] dump_stack+0x137/0x19d [ 149.106236][T16206] should_fail+0x23c/0x250 [ 149.106251][T16206] ? __kernfs_new_node+0x6a/0x330 [ 149.110086][T16168] loop1: p2 size 327680 extends beyond EOD, [ 149.112965][T16206] __should_failslab+0x81/0x90 [ 149.112996][T16206] should_failslab+0x5/0x20 [ 149.116335][T16168] truncated [ 149.120597][T16206] kmem_cache_alloc+0x46/0x300 [ 149.127924][T16168] loop1: p4 size 2097152 extends beyond EOD, [ 149.130108][T16206] ? mutex_spin_on_owner+0x14c/0x170 [ 149.136134][T16168] truncated [ 149.140937][T16206] __kernfs_new_node+0x6a/0x330 [ 149.173806][T16206] ? __mutex_lock+0x657/0x670 [ 149.178536][T16206] ? __cond_resched+0x11/0x40 [ 149.183285][T16206] ? mutex_lock+0x9/0x30 [ 149.187531][T16206] kernfs_new_node+0x5b/0xd0 [ 149.192121][T16206] __kernfs_create_file+0x45/0x1a0 [ 149.197214][T16206] sysfs_add_file_mode_ns+0x1c1/0x250 [ 149.202747][T16206] internal_create_group+0x2e4/0x850 [ 149.208012][T16206] sysfs_create_groups+0x3d/0xf0 [ 149.213187][T16206] device_add+0x4dc/0xe50 [ 149.217506][T16206] add_partition+0x35b/0x580 [ 149.222081][T16206] blk_add_partitions+0x583/0xa80 [ 149.227107][T16206] bdev_disk_changed+0x1a7/0x200 [ 149.232036][T16206] loop_set_status+0x75f/0x7e0 [ 149.236813][T16206] lo_ioctl+0x758/0x11f0 [ 149.241036][T16206] ? path_openat+0x19ab/0x20b0 [ 149.245847][T16206] ? putname+0xa5/0xc0 [ 149.249929][T16206] ? ___cache_free+0x3c/0x300 [ 149.254701][T16206] ? blkdev_common_ioctl+0x9c3/0x1010 [ 149.260120][T16206] ? selinux_file_ioctl+0x8e0/0x970 [ 149.265439][T16206] ? lo_release+0x120/0x120 [ 149.269948][T16206] blkdev_ioctl+0x1d0/0x3c0 [ 149.274429][T16206] block_ioctl+0x6d/0x80 [ 149.278650][T16206] ? blkdev_iopoll+0x70/0x70 [ 149.283216][T16206] __se_sys_ioctl+0xcb/0x140 [ 149.287802][T16206] __x64_sys_ioctl+0x3f/0x50 [ 149.292382][T16206] do_syscall_64+0x34/0x50 [ 149.296905][T16206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.302909][T16206] RIP: 0033:0x466217 [ 149.306789][T16206] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.326438][T16206] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 149.335252][T16206] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 01:33:47 executing program 5: syz_read_part_table(0xa0e, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:47 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) 01:33:47 executing program 1: syz_read_part_table(0x1100, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 149.344282][T16206] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 149.353340][T16206] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 149.361865][T16206] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 149.370205][T16206] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 149.384473][T16206] loop3: p2 could not be added: 12 [ 149.389821][T16206] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:47 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffffff00]}, 0x8) 01:33:47 executing program 3 (fault-call:0 fault-nth:77): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 149.439576][T16256] loop2: detected capacity change from 0 to 1 01:33:47 executing program 4: r0 = io_uring_setup(0x3560, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x5, 0x0, 0x0) [ 149.496750][T16261] loop0: detected capacity change from 0 to 5 [ 149.503587][T16274] loop1: detected capacity change from 0 to 8 [ 149.510028][T16273] loop5: detected capacity change from 0 to 5 [ 149.517179][T16277] loop3: detected capacity change from 0 to 1 [ 149.526285][T16261] loop0: p2 p4 [ 149.529986][T16261] loop0: p2 size 327680 extends beyond EOD, truncated [ 149.536860][T16287] loop2: detected capacity change from 0 to 1 [ 149.543792][T16261] loop0: p4 size 2097152 extends beyond EOD, truncated [ 149.544482][T16273] loop5: p2 p4 [ 149.555677][T16277] loop3: p2 p4 [ 149.556159][T16273] loop5: p2 size 327680 extends beyond EOD, truncated [ 149.559166][T16277] loop3: p2 size 327680 extends beyond EOD, truncated [ 149.559357][T16277] FAULT_INJECTION: forcing a failure. [ 149.559357][T16277] name failslab, interval 1, probability 0, space 0, times 0 [ 149.588473][T16277] CPU: 1 PID: 16277 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 149.597252][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.607549][T16277] Call Trace: [ 149.610843][T16277] dump_stack+0x137/0x19d [ 149.615276][T16277] should_fail+0x23c/0x250 [ 149.619670][T16277] ? __kernfs_new_node+0x6a/0x330 [ 149.624692][T16277] __should_failslab+0x81/0x90 [ 149.629436][T16277] should_failslab+0x5/0x20 [ 149.633923][T16277] kmem_cache_alloc+0x46/0x300 [ 149.638683][T16277] __kernfs_new_node+0x6a/0x330 [ 149.644988][T16277] ? __cond_resched+0x11/0x40 [ 149.649645][T16277] ? mutex_lock+0x9/0x30 [ 149.653873][T16277] kernfs_new_node+0x5b/0xd0 [ 149.658464][T16277] __kernfs_create_file+0x45/0x1a0 [ 149.663559][T16277] sysfs_add_file_mode_ns+0x1c1/0x250 [ 149.668912][T16277] internal_create_group+0x2e4/0x850 [ 149.674294][T16277] sysfs_create_groups+0x3d/0xf0 [ 149.679217][T16277] device_add+0x4dc/0xe50 [ 149.683529][T16277] add_partition+0x35b/0x580 [ 149.688360][T16277] blk_add_partitions+0x583/0xa80 [ 149.693630][T16277] bdev_disk_changed+0x1a7/0x200 [ 149.699939][T16277] loop_set_status+0x75f/0x7e0 [ 149.704814][T16277] lo_ioctl+0x758/0x11f0 [ 149.709043][T16277] ? path_openat+0x19ab/0x20b0 [ 149.713835][T16277] ? putname+0xa5/0xc0 [ 149.717891][T16277] ? ___cache_free+0x3c/0x300 [ 149.722558][T16277] ? blkdev_common_ioctl+0x9c3/0x1010 [ 149.727972][T16277] ? selinux_file_ioctl+0x8e0/0x970 [ 149.733260][T16277] ? lo_release+0x120/0x120 [ 149.737761][T16277] blkdev_ioctl+0x1d0/0x3c0 [ 149.742316][T16277] block_ioctl+0x6d/0x80 [ 149.746660][T16277] ? blkdev_iopoll+0x70/0x70 [ 149.751230][T16277] __se_sys_ioctl+0xcb/0x140 [ 149.755931][T16277] __x64_sys_ioctl+0x3f/0x50 [ 149.760500][T16277] do_syscall_64+0x34/0x50 [ 149.764905][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.770783][T16277] RIP: 0033:0x466217 [ 149.774671][T16277] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.794259][T16277] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 149.802653][T16277] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 149.810603][T16277] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 149.818801][T16277] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 149.827965][T16277] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 149.835985][T16277] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:47 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) 01:33:47 executing program 3 (fault-call:0 fault-nth:78): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 4: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 149.844972][T16277] loop3: p2 could not be added: 12 [ 149.850238][T16277] loop3: p4 size 2097152 extends beyond EOD, truncated [ 149.851540][T16274] loop1: p2 p4 [ 149.860194][T16273] loop5: p4 size 2097152 extends beyond EOD, truncated [ 149.861161][T16274] loop1: p2 size 327680 extends beyond EOD, truncated [ 149.874904][T16274] loop1: p4 size 2097152 extends beyond EOD, truncated [ 149.910916][T16273] loop5: detected capacity change from 0 to 5 [ 149.935212][T16274] loop1: detected capacity change from 0 to 8 [ 149.955834][T16273] loop5: p2 p4 [ 149.956041][ T1028] loop1: p2 p4 [ 149.959460][T16273] loop5: p2 size 327680 extends beyond EOD, truncated [ 149.964371][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 149.973283][T16273] loop5: p4 size 2097152 extends beyond EOD, truncated [ 149.977999][T16338] loop3: detected capacity change from 0 to 1 [ 149.990739][T16336] loop4: detected capacity change from 0 to 1 [ 149.991088][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 150.003953][T16339] loop0: detected capacity change from 0 to 5 01:33:47 executing program 5: syz_read_part_table(0xb00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:47 executing program 1: syz_read_part_table(0x1200, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 150.011866][T16274] loop1: p2 p4 [ 150.015821][T16274] loop1: p2 size 327680 extends beyond EOD, truncated [ 150.023164][T16274] loop1: p4 size 2097152 extends beyond EOD, truncated [ 150.030773][T16339] loop0: p2 p4 [ 150.034436][T16339] loop0: p2 size 327680 extends beyond EOD, truncated [ 150.041789][T16338] loop3: p2 p4 [ 150.045292][T16336] loop4: p2 p4 [ 150.049081][T16338] loop3: p2 size 327680 extends beyond EOD, truncated [ 150.053463][T16336] loop4: p2 size 327680 extends beyond EOD, truncated [ 150.057158][T16338] FAULT_INJECTION: forcing a failure. [ 150.057158][T16338] name failslab, interval 1, probability 0, space 0, times 0 [ 150.064584][T16339] loop0: p4 size 2097152 extends beyond EOD, truncated [ 150.075981][T16338] CPU: 1 PID: 16338 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 150.076001][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.076010][T16338] Call Trace: [ 150.076017][T16338] dump_stack+0x137/0x19d [ 150.076037][T16338] should_fail+0x23c/0x250 [ 150.076050][T16338] ? __kernfs_new_node+0x6a/0x330 [ 150.100725][T16336] loop4: p4 size 2097152 extends beyond EOD, [ 150.102164][T16338] __should_failslab+0x81/0x90 [ 150.105680][T16336] truncated [ 150.109956][T16338] should_failslab+0x5/0x20 [ 150.122545][ T1028] loop4: p2 p4 [ 150.125395][T16338] kmem_cache_alloc+0x46/0x300 [ 150.125419][T16338] __kernfs_new_node+0x6a/0x330 [ 150.130508][ T1028] loop4: p2 size 327680 extends beyond EOD, [ 150.133309][T16338] ? kernfs_add_one+0x356/0x3c0 01:33:47 executing program 4: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 150.133328][T16338] ? __kernfs_create_file+0x189/0x1a0 [ 150.137922][ T1028] truncated [ 150.141358][T16338] kernfs_create_dir_ns+0x5e/0x140 [ 150.148382][ T1028] loop4: p4 size 2097152 extends beyond EOD, [ 150.150927][T16338] internal_create_group+0x138/0x850 [ 150.157009][ T1028] truncated [ 150.161815][T16338] ? internal_create_group+0x7c9/0x850 [ 150.196768][T16375] loop2: detected capacity change from 0 to 1 [ 150.196815][T16338] sysfs_create_group+0x1b/0x20 [ 150.207790][T16338] dpm_sysfs_add+0x43/0x1d0 [ 150.212287][T16338] device_add+0x925/0xe50 [ 150.216644][T16338] add_partition+0x35b/0x580 [ 150.221219][T16338] blk_add_partitions+0x583/0xa80 [ 150.226336][T16338] bdev_disk_changed+0x1a7/0x200 [ 150.231370][T16338] loop_set_status+0x75f/0x7e0 [ 150.236139][T16338] lo_ioctl+0x758/0x11f0 [ 150.240410][T16338] ? path_openat+0x19ab/0x20b0 [ 150.245547][T16338] ? putname+0xa5/0xc0 [ 150.249671][T16338] ? ___cache_free+0x3c/0x300 [ 150.254332][T16338] ? blkdev_common_ioctl+0x9c3/0x1010 [ 150.259767][T16338] ? selinux_file_ioctl+0x8e0/0x970 [ 150.265833][T16338] ? lo_release+0x120/0x120 [ 150.270388][T16338] blkdev_ioctl+0x1d0/0x3c0 [ 150.274875][T16338] block_ioctl+0x6d/0x80 [ 150.279120][T16338] ? blkdev_iopoll+0x70/0x70 [ 150.283812][T16338] __se_sys_ioctl+0xcb/0x140 [ 150.288446][T16338] __x64_sys_ioctl+0x3f/0x50 [ 150.293148][T16338] do_syscall_64+0x34/0x50 [ 150.297647][T16338] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.303579][T16338] RIP: 0033:0x466217 [ 150.307465][T16338] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 150.327074][T16338] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 150.335621][T16338] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 150.343666][T16338] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 150.351697][T16338] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 150.359678][T16338] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 150.367631][T16338] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 150.379490][T16338] loop3: p2 could not be added: 12 [ 150.384795][T16338] loop3: p4 size 2097152 extends beyond EOD, truncated [ 150.396194][T16384] loop5: detected capacity change from 0 to 5 01:33:48 executing program 3 (fault-call:0 fault-nth:79): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:48 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) 01:33:48 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 150.415897][T16384] loop5: p2 p4 [ 150.419577][T16384] loop5: p2 size 327680 extends beyond EOD, truncated [ 150.433528][T16400] loop4: detected capacity change from 0 to 1 [ 150.440781][T16404] loop1: detected capacity change from 0 to 9 [ 150.448396][T16384] loop5: p4 size 2097152 extends beyond EOD, truncated [ 150.459992][T16410] loop3: detected capacity change from 0 to 1 [ 150.472092][ T1028] loop5: p2 p4 [ 150.476445][T16400] loop4: p2 p4 [ 150.480067][T16400] loop4: p2 size 327680 extends beyond EOD, truncated [ 150.487412][T16418] loop0: detected capacity change from 0 to 5 [ 150.487928][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 150.497535][T16400] loop4: p4 size 2097152 extends beyond EOD, truncated [ 150.512525][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 150.513334][T16431] loop2: detected capacity change from 0 to 1 [ 150.519805][T16404] loop1: p2 p4 [ 150.529273][T16410] loop3: p2 p4 [ 150.529961][T16404] loop1: p2 size 327680 extends beyond EOD, truncated [ 150.532946][T16410] loop3: p2 size 327680 extends beyond EOD, truncated [ 150.539796][T16418] loop0: p2 p4 [ 150.550791][T16418] loop0: p2 size 327680 extends beyond EOD, truncated [ 150.561819][T16410] FAULT_INJECTION: forcing a failure. 01:33:48 executing program 4: syz_read_part_table(0x9, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 150.561819][T16410] name failslab, interval 1, probability 0, space 0, times 0 [ 150.564654][T16404] loop1: p4 size 2097152 extends beyond EOD, truncated [ 150.574619][T16410] CPU: 0 PID: 16410 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 150.586153][T16418] loop0: p4 size 2097152 extends beyond EOD, [ 150.590220][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.590233][T16410] Call Trace: [ 150.590239][T16410] dump_stack+0x137/0x19d [ 150.590261][T16410] should_fail+0x23c/0x250 [ 150.596328][T16418] truncated [ 150.606342][T16410] ? __kernfs_new_node+0x6a/0x330 [ 150.606366][T16410] __should_failslab+0x81/0x90 [ 150.631175][T16410] should_failslab+0x5/0x20 [ 150.635693][T16410] kmem_cache_alloc+0x46/0x300 [ 150.637339][T16384] loop5: detected capacity change from 0 to 5 [ 150.640585][T16410] __kernfs_new_node+0x6a/0x330 [ 150.640606][T16410] ? kernfs_add_one+0x356/0x3c0 [ 150.640627][T16410] ? __kernfs_create_file+0x189/0x1a0 [ 150.661839][T16410] kernfs_create_dir_ns+0x5e/0x140 [ 150.666951][T16410] internal_create_group+0x138/0x850 [ 150.672230][T16410] ? internal_create_group+0x7c9/0x850 [ 150.677679][T16410] sysfs_create_group+0x1b/0x20 [ 150.682784][T16410] dpm_sysfs_add+0x43/0x1d0 [ 150.687430][T16410] device_add+0x925/0xe50 [ 150.691749][T16410] add_partition+0x35b/0x580 [ 150.696427][T16410] blk_add_partitions+0x583/0xa80 [ 150.701481][T16410] bdev_disk_changed+0x1a7/0x200 [ 150.706409][T16410] loop_set_status+0x75f/0x7e0 [ 150.711223][T16410] lo_ioctl+0x758/0x11f0 [ 150.715572][T16410] ? path_openat+0x19ab/0x20b0 [ 150.720329][T16410] ? putname+0xa5/0xc0 [ 150.724395][T16410] ? ___cache_free+0x3c/0x300 [ 150.729088][T16410] ? blkdev_common_ioctl+0x9c3/0x1010 [ 150.734475][T16410] ? selinux_file_ioctl+0x8e0/0x970 [ 150.739713][T16410] ? lo_release+0x120/0x120 [ 150.744197][T16410] blkdev_ioctl+0x1d0/0x3c0 [ 150.748684][T16410] block_ioctl+0x6d/0x80 [ 150.753101][T16410] ? blkdev_iopoll+0x70/0x70 [ 150.757676][T16410] __se_sys_ioctl+0xcb/0x140 [ 150.762247][T16410] __x64_sys_ioctl+0x3f/0x50 [ 150.766813][T16410] do_syscall_64+0x34/0x50 [ 150.771247][T16410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.777149][T16410] RIP: 0033:0x466217 [ 150.781036][T16410] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 150.800623][T16410] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 150.809121][T16410] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 150.817086][T16410] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 150.825035][T16410] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 150.832983][T16410] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 150.840960][T16410] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 150.849204][T16410] loop3: p2 could not be added: 12 [ 150.854398][T16410] loop3: p4 size 2097152 extends beyond EOD, truncated [ 150.865866][T16384] loop5: p2 p4 [ 150.869937][T16384] loop5: p2 size 327680 extends beyond EOD, truncated [ 150.876889][T13803] print_req_error: 6 callbacks suppressed [ 150.876901][T13803] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 150.879546][T12410] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 150.887392][ T879] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.904449][T16454] loop4: detected capacity change from 0 to 1 [ 150.906533][ T879] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 150.906623][ T879] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.921413][T16384] loop5: p4 size 2097152 extends beyond EOD, [ 150.923495][ T879] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 150.923518][ T879] blk_update_request: I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.931487][T16384] truncated 01:33:48 executing program 3 (fault-call:0 fault-nth:80): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:48 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:48 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 150.942424][ T879] Buffer I/O error on dev loop1p4, logical block 1, async page read [ 150.942461][ T879] blk_update_request: I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.977588][T16404] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 150.978399][ T879] Buffer I/O error on dev loop1p2, logical block 1, async page read [ 151.004261][ T879] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.015149][ T879] Buffer I/O error on dev loop1p4, logical block 2, async page read [ 151.023245][ T879] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.034128][ T879] Buffer I/O error on dev loop1p2, logical block 2, async page read [ 151.042225][ T879] blk_update_request: I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.043493][ T1028] loop5: p2 p4 [ 151.053202][ T879] Buffer I/O error on dev loop1p4, logical block 3, async page read [ 151.057929][T16477] loop2: detected capacity change from 0 to 1 [ 151.064627][ T879] blk_update_request: I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.071513][T16476] loop0: detected capacity change from 0 to 5 [ 151.081566][ T879] Buffer I/O error on dev loop1p2, logical block 3, async page read [ 151.081595][ T879] Buffer I/O error on dev loop1p4, logical block 4, async page read [ 151.081611][ T879] Buffer I/O error on dev loop1p2, logical block 4, async page read [ 151.089253][T16404] loop1: detected capacity change from 0 to 9 [ 151.112175][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:48 executing program 1: syz_read_part_table(0x1300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:48 executing program 5: syz_read_part_table(0xb0e, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 151.118031][T16475] loop3: detected capacity change from 0 to 1 [ 151.131331][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 151.135987][T16454] loop4: p2 p4 [ 151.142086][T16454] loop4: p2 size 327680 extends beyond EOD, truncated [ 151.150312][T16454] loop4: p4 size 2097152 extends beyond EOD, truncated [ 151.158082][T16476] loop0: p2 p4 [ 151.158702][T16475] loop3: p2 p4 [ 151.163546][T16476] loop0: p2 size 327680 extends beyond EOD, truncated [ 151.165111][T16475] loop3: p2 size 327680 extends beyond EOD, truncated [ 151.172111][T16476] loop0: p4 size 2097152 extends beyond EOD, truncated [ 151.194137][T16475] FAULT_INJECTION: forcing a failure. [ 151.194137][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 151.206861][T16475] CPU: 1 PID: 16475 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 151.215652][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.225697][T16475] Call Trace: [ 151.228989][T16475] dump_stack+0x137/0x19d [ 151.233310][T16475] should_fail+0x23c/0x250 [ 151.237721][T16475] ? __kernfs_new_node+0x6a/0x330 [ 151.242725][T16475] __should_failslab+0x81/0x90 [ 151.247504][T16475] should_failslab+0x5/0x20 [ 151.252004][T16475] kmem_cache_alloc+0x46/0x300 [ 151.256744][T16475] __kernfs_new_node+0x6a/0x330 [ 151.261630][T16475] ? __cond_resched+0x11/0x40 [ 151.266286][T16475] ? mutex_lock+0x9/0x30 [ 151.270518][T16475] kernfs_new_node+0x5b/0xd0 [ 151.275115][T16475] __kernfs_create_file+0x45/0x1a0 [ 151.280216][T16475] sysfs_add_file_mode_ns+0x1c1/0x250 [ 151.285638][T16475] sysfs_merge_group+0xb5/0x190 [ 151.290479][T16475] dpm_sysfs_add+0x9d/0x1d0 [ 151.295042][T16475] device_add+0x925/0xe50 [ 151.299488][T16475] add_partition+0x35b/0x580 [ 151.304065][T16475] blk_add_partitions+0x583/0xa80 [ 151.309107][T16475] bdev_disk_changed+0x1a7/0x200 [ 151.314098][T16475] loop_set_status+0x75f/0x7e0 [ 151.318844][T16475] lo_ioctl+0x758/0x11f0 [ 151.323145][T16475] ? path_openat+0x19ab/0x20b0 [ 151.327898][T16475] ? putname+0xa5/0xc0 [ 151.331956][T16475] ? ___cache_free+0x3c/0x300 [ 151.336636][T16475] ? blkdev_common_ioctl+0x9c3/0x1010 [ 151.342009][T16475] ? selinux_file_ioctl+0x8e0/0x970 [ 151.348163][T16475] ? lo_release+0x120/0x120 [ 151.354690][T16475] blkdev_ioctl+0x1d0/0x3c0 [ 151.359190][T16475] block_ioctl+0x6d/0x80 [ 151.363435][T16475] ? blkdev_iopoll+0x70/0x70 [ 151.368008][T16475] __se_sys_ioctl+0xcb/0x140 [ 151.372611][T16475] __x64_sys_ioctl+0x3f/0x50 [ 151.377188][T16475] do_syscall_64+0x34/0x50 [ 151.381604][T16475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.387497][T16475] RIP: 0033:0x466217 [ 151.391367][T16475] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.411086][T16475] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 01:33:49 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:49 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x66, &(0x7f0000000140)={0x0, 0xe52f, 0x4, 0x0, 0xd3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 151.419508][T16475] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 151.427474][T16475] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 151.435483][T16475] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 151.443433][T16475] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 151.451457][T16475] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 151.459869][T16475] loop3: p2 could not be added: 12 [ 151.465103][T16475] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:49 executing program 3 (fault-call:0 fault-nth:81): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x66, &(0x7f0000000140)={0x0, 0xe52f, 0x4, 0x0, 0xd3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 151.518248][T16521] loop5: detected capacity change from 0 to 5 [ 151.527138][T16528] loop2: detected capacity change from 0 to 1 01:33:49 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x66, &(0x7f0000000140)={0x0, 0xe52f, 0x4, 0x0, 0xd3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 151.592679][T16521] loop5: p2 p4 [ 151.599227][T16521] loop5: p2 size 327680 extends beyond EOD, truncated [ 151.614017][T16521] loop5: p4 size 2097152 extends beyond EOD, truncated [ 151.623874][T16534] loop0: detected capacity change from 0 to 5 [ 151.630217][T16533] loop1: detected capacity change from 0 to 9 [ 151.641398][T16551] loop3: detected capacity change from 0 to 1 [ 151.657356][T16561] loop2: detected capacity change from 0 to 1 [ 151.695755][T16551] loop3: p2 p4 [ 151.703631][T16521] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 151.707099][T16551] loop3: p2 size 327680 extends beyond EOD, truncated [ 151.721180][T16534] loop0: p2 p4 [ 151.723423][T16551] FAULT_INJECTION: forcing a failure. [ 151.723423][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 151.724709][T16534] loop0: p2 size 327680 extends beyond EOD, 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x66, &(0x7f0000000140)={0x0, 0xe52f, 0x4, 0x0, 0xd3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 151.737286][T16551] CPU: 1 PID: 16551 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 151.737306][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.737316][T16551] Call Trace: [ 151.737323][T16551] dump_stack+0x137/0x19d [ 151.743278][T16534] truncated [ 151.758072][T16534] loop0: p4 size 2097152 extends beyond EOD, [ 151.762061][T16551] should_fail+0x23c/0x250 [ 151.765372][T16534] truncated [ 151.769677][T16551] ? __kernfs_new_node+0x6a/0x330 [ 151.769702][T16551] __should_failslab+0x81/0x90 [ 151.796116][T16551] should_failslab+0x5/0x20 [ 151.800651][T16551] kmem_cache_alloc+0x46/0x300 [ 151.805411][T16551] __kernfs_new_node+0x6a/0x330 [ 151.810314][T16551] ? __cond_resched+0x11/0x40 [ 151.815663][T16551] ? mutex_lock+0x9/0x30 [ 151.819885][T16551] kernfs_new_node+0x5b/0xd0 [ 151.824468][T16551] __kernfs_create_file+0x45/0x1a0 [ 151.829630][T16551] sysfs_add_file_mode_ns+0x1c1/0x250 [ 151.834995][T16551] sysfs_merge_group+0xb5/0x190 [ 151.839825][T16551] dpm_sysfs_add+0x9d/0x1d0 [ 151.844307][T16551] device_add+0x925/0xe50 [ 151.848646][T16551] add_partition+0x35b/0x580 [ 151.853213][T16551] blk_add_partitions+0x583/0xa80 [ 151.858396][T16551] bdev_disk_changed+0x1a7/0x200 [ 151.863327][T16551] loop_set_status+0x75f/0x7e0 [ 151.868149][T16551] lo_ioctl+0x758/0x11f0 [ 151.872498][T16551] ? path_openat+0x19ab/0x20b0 [ 151.877248][T16551] ? putname+0xa5/0xc0 [ 151.881293][T16551] ? ___cache_free+0x3c/0x300 [ 151.885961][T16551] ? blkdev_common_ioctl+0x9c3/0x1010 [ 151.891387][T16551] ? selinux_file_ioctl+0x8e0/0x970 [ 151.896589][T16551] ? lo_release+0x120/0x120 [ 151.901086][T16551] blkdev_ioctl+0x1d0/0x3c0 [ 151.905571][T16551] block_ioctl+0x6d/0x80 [ 151.909794][T16551] ? blkdev_iopoll+0x70/0x70 [ 151.914424][T16551] __se_sys_ioctl+0xcb/0x140 [ 151.919046][T16551] __x64_sys_ioctl+0x3f/0x50 [ 151.923618][T16551] do_syscall_64+0x34/0x50 [ 151.928039][T16551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.933940][T16551] RIP: 0033:0x466217 [ 151.937822][T16551] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.957491][T16551] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 151.966024][T16551] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 151.973976][T16551] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 151.982827][T16551] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 01:33:49 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:49 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 151.990788][T16551] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 151.998779][T16551] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 152.007183][T16551] loop3: p2 could not be added: 12 [ 152.012496][T16551] loop3: p4 size 2097152 extends beyond EOD, truncated [ 152.013201][T16533] loop1: p2 p4 [ 152.023315][T16533] loop1: p2 size 327680 extends beyond EOD, truncated [ 152.079639][T16521] loop5: detected capacity change from 0 to 5 [ 152.089256][T16533] loop1: p4 size 2097152 extends beyond EOD, truncated [ 152.124801][T16608] loop2: detected capacity change from 0 to 1 [ 152.147969][T16521] loop5: p2 p4 [ 152.151631][T16521] loop5: p2 size 327680 extends beyond EOD, truncated [ 152.159053][T16521] loop5: p4 size 2097152 extends beyond EOD, truncated [ 152.176464][T16533] loop1: detected capacity change from 0 to 9 [ 152.176656][T16609] loop0: detected capacity change from 0 to 5 [ 152.205541][T16533] loop1: p2 p4 [ 152.209072][T16533] loop1: p2 size 327680 extends beyond EOD, truncated [ 152.217700][T16609] loop0: p2 p4 01:33:50 executing program 1: syz_read_part_table(0x2000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 3 (fault-call:0 fault-nth:82): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:50 executing program 5: syz_read_part_table(0xc00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 152.219497][T16533] loop1: p4 size 2097152 extends beyond EOD, truncated [ 152.221362][T16609] loop0: p2 size 327680 extends beyond EOD, truncated [ 152.231781][ T1028] loop5: p2 p4 [ 152.236332][T16609] loop0: p4 size 2097152 extends beyond EOD, truncated [ 152.238882][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 152.252607][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 152.335707][T16651] loop2: detected capacity change from 0 to 1 [ 152.338983][T16652] loop3: detected capacity change from 0 to 1 [ 152.348119][T16653] loop5: detected capacity change from 0 to 6 [ 152.368711][ T1028] loop5: p2 p4 [ 152.372339][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 152.379869][T16670] loop0: detected capacity change from 0 to 5 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:50 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 152.379918][T16665] loop1: detected capacity change from 0 to 16 [ 152.392418][T16652] loop3: p2 p4 [ 152.393050][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 152.396766][T16652] loop3: p2 size 327680 extends beyond EOD, truncated [ 152.411400][T16653] loop5: p2 p4 [ 152.420632][T16653] loop5: p2 size 327680 extends beyond EOD, truncated [ 152.424820][T16652] FAULT_INJECTION: forcing a failure. 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 152.424820][T16652] name failslab, interval 1, probability 0, space 0, times 0 [ 152.440199][T16652] CPU: 1 PID: 16652 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 152.440510][T16653] loop5: p4 size 2097152 extends beyond EOD, [ 152.448988][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.449004][T16652] Call Trace: [ 152.449011][T16652] dump_stack+0x137/0x19d [ 152.455103][T16653] truncated [ 152.475846][T16652] should_fail+0x23c/0x250 [ 152.478010][T16693] loop2: detected capacity change from 0 to 1 01:33:50 executing program 5: syz_read_part_table(0xc0e, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 152.480264][T16652] ? __kernfs_new_node+0x6a/0x330 [ 152.480284][T16652] __should_failslab+0x81/0x90 [ 152.480304][T16652] should_failslab+0x5/0x20 [ 152.500799][T16652] kmem_cache_alloc+0x46/0x300 [ 152.505578][T16652] ? idr_alloc_cyclic+0x249/0x2d0 [ 152.510703][T16652] __kernfs_new_node+0x6a/0x330 [ 152.515609][T16652] ? __cond_resched+0x11/0x40 [ 152.520321][T16652] ? rb_first+0x9/0x40 [ 152.524396][T16652] kernfs_new_node+0x5b/0xd0 [ 152.528977][T16652] __kernfs_create_file+0x45/0x1a0 [ 152.534092][T16652] sysfs_add_file_mode_ns+0x1c1/0x250 [ 152.539469][T16652] sysfs_merge_group+0xb5/0x190 [ 152.544392][T16652] dpm_sysfs_add+0x9d/0x1d0 [ 152.548879][T16652] device_add+0x925/0xe50 [ 152.553195][T16652] add_partition+0x35b/0x580 [ 152.557769][T16652] blk_add_partitions+0x583/0xa80 [ 152.562807][T16652] bdev_disk_changed+0x1a7/0x200 [ 152.567725][T16652] loop_set_status+0x75f/0x7e0 [ 152.572473][T16652] lo_ioctl+0x758/0x11f0 [ 152.576706][T16652] ? path_openat+0x19ab/0x20b0 [ 152.581453][T16652] ? putname+0xa5/0xc0 [ 152.585515][T16652] ? ___cache_free+0x3c/0x300 [ 152.590180][T16652] ? blkdev_common_ioctl+0x9c3/0x1010 [ 152.595627][T16652] ? selinux_file_ioctl+0x8e0/0x970 [ 152.600886][T16652] ? lo_release+0x120/0x120 [ 152.605391][T16652] blkdev_ioctl+0x1d0/0x3c0 [ 152.609884][T16652] block_ioctl+0x6d/0x80 [ 152.614106][T16652] ? blkdev_iopoll+0x70/0x70 [ 152.618732][T16652] __se_sys_ioctl+0xcb/0x140 [ 152.623301][T16652] __x64_sys_ioctl+0x3f/0x50 [ 152.627904][T16652] do_syscall_64+0x34/0x50 [ 152.632302][T16652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.638176][T16652] RIP: 0033:0x466217 [ 152.642070][T16652] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.661665][T16652] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 152.670056][T16652] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 152.678006][T16652] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 152.685956][T16652] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 152.693911][T16652] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 152.701957][T16652] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 152.710563][T16665] loop1: p2 p4 [ 152.714181][T16665] loop1: p2 size 327680 extends beyond EOD, truncated [ 152.714571][T16670] loop0: p2 p4 [ 152.725916][T16665] loop1: p4 size 2097152 extends beyond EOD, truncated [ 152.733184][T16670] loop0: p2 size 327680 extends beyond EOD, truncated [ 152.740599][T16652] loop3: p2 could not be added: 12 [ 152.745833][T16652] loop3: p4 size 2097152 extends beyond EOD, truncated [ 152.751800][T16670] loop0: p4 size 2097152 extends beyond EOD, truncated [ 152.765886][ T1028] loop0: p2 p4 [ 152.772698][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 152.782367][T16702] loop5: detected capacity change from 0 to 6 [ 152.801081][T16665] loop1: detected capacity change from 0 to 16 [ 152.801319][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 152.826784][T16665] loop1: p2 p4 [ 152.830341][T16665] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:50 executing program 1: syz_read_part_table(0x2400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:50 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 3 (fault-call:0 fault-nth:83): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:50 executing program 5: syz_read_part_table(0xd00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 152.837885][T16665] loop1: p4 size 2097152 extends beyond EOD, truncated [ 152.845822][T16702] loop5: p2 p4 [ 152.849842][T16702] loop5: p2 size 327680 extends beyond EOD, truncated [ 152.857178][T16702] loop5: p4 size 2097152 extends beyond EOD, truncated [ 152.876280][ T1028] loop1: p2 p4 [ 152.879853][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 152.888822][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 152.908388][T16755] loop2: detected capacity change from 0 to 1 [ 152.918036][T16761] loop3: detected capacity change from 0 to 1 [ 152.918162][T16763] loop0: detected capacity change from 0 to 5 [ 152.955523][T16763] loop0: p2 p4 [ 152.959233][T16761] loop3: p2 p4 [ 152.959288][T16763] loop0: p2 size 327680 extends beyond EOD, truncated [ 152.962917][T16761] loop3: p2 size 327680 extends beyond EOD, truncated [ 152.978237][T16759] loop1: detected capacity change from 0 to 18 [ 152.989143][T16763] loop0: p4 size 2097152 extends beyond EOD, truncated [ 153.003058][T16761] FAULT_INJECTION: forcing a failure. [ 153.003058][T16761] name failslab, interval 1, probability 0, space 0, times 0 [ 153.015743][T16761] CPU: 0 PID: 16761 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 153.024511][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.034566][T16761] Call Trace: [ 153.037845][T16761] dump_stack+0x137/0x19d [ 153.042230][T16761] should_fail+0x23c/0x250 [ 153.046646][T16761] ? __kernfs_new_node+0x6a/0x330 [ 153.051825][T16761] __should_failslab+0x81/0x90 [ 153.056585][T16761] should_failslab+0x5/0x20 [ 153.061081][T16761] kmem_cache_alloc+0x46/0x300 [ 153.065840][T16761] __kernfs_new_node+0x6a/0x330 [ 153.071462][T16761] ? __cond_resched+0x11/0x40 [ 153.076124][T16761] ? mutex_lock+0x9/0x30 [ 153.080359][T16761] kernfs_new_node+0x5b/0xd0 [ 153.085000][T16761] __kernfs_create_file+0x45/0x1a0 [ 153.090183][T16761] sysfs_add_file_mode_ns+0x1c1/0x250 [ 153.095612][T16761] sysfs_merge_group+0xb5/0x190 [ 153.100449][T16761] dpm_sysfs_add+0x9d/0x1d0 [ 153.104937][T16761] device_add+0x925/0xe50 [ 153.109251][T16761] add_partition+0x35b/0x580 [ 153.113868][T16761] blk_add_partitions+0x583/0xa80 [ 153.118926][T16761] bdev_disk_changed+0x1a7/0x200 [ 153.123843][T16761] loop_set_status+0x75f/0x7e0 [ 153.128621][T16761] lo_ioctl+0x758/0x11f0 [ 153.132920][T16761] ? path_openat+0x19ab/0x20b0 [ 153.137689][T16761] ? putname+0xa5/0xc0 [ 153.141801][T16761] ? ___cache_free+0x3c/0x300 [ 153.146465][T16761] ? blkdev_common_ioctl+0x9c3/0x1010 [ 153.151814][T16761] ? selinux_file_ioctl+0x8e0/0x970 [ 153.157000][T16761] ? lo_release+0x120/0x120 [ 153.161514][T16761] blkdev_ioctl+0x1d0/0x3c0 [ 153.166169][T16761] block_ioctl+0x6d/0x80 [ 153.170422][T16761] ? blkdev_iopoll+0x70/0x70 [ 153.174991][T16761] __se_sys_ioctl+0xcb/0x140 [ 153.179571][T16761] __x64_sys_ioctl+0x3f/0x50 [ 153.184185][T16761] do_syscall_64+0x34/0x50 [ 153.188582][T16761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.194461][T16761] RIP: 0033:0x466217 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:51 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 153.198344][T16761] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 153.218063][T16761] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 153.226464][T16761] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 153.234414][T16761] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 153.242466][T16761] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 153.250429][T16761] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 153.258378][T16761] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 153.272761][T16761] loop3: p2 could not be added: 12 [ 153.278067][T16761] loop3: p4 size 2097152 extends beyond EOD, truncated [ 153.292800][T16759] loop1: p2 p4 [ 153.300003][T16759] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:51 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 153.307927][T16795] loop5: detected capacity change from 0 to 6 [ 153.316762][T16759] loop1: p4 size 2097152 extends beyond EOD, truncated [ 153.317409][ T1028] loop3: p2 p4 [ 153.332047][T16808] loop2: detected capacity change from 0 to 1 [ 153.337868][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 153.347434][T16795] loop5: p2 p4 [ 153.351063][T16795] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 153.355500][T16817] loop0: detected capacity change from 0 to 5 [ 153.359359][T16795] loop5: p4 size 2097152 extends beyond EOD, truncated [ 153.364205][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 153.382105][T16759] loop1: detected capacity change from 0 to 18 01:33:51 executing program 1: syz_read_part_table(0x2500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:51 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:51 executing program 3 (fault-call:0 fault-nth:84): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 153.425974][T16759] loop1: p2 p4 [ 153.426063][T16817] loop0: p2 p4 [ 153.429771][T16759] loop1: p2 size 327680 extends beyond EOD, truncated [ 153.433525][T16817] loop0: p2 size 327680 extends beyond EOD, truncated [ 153.454405][T16759] loop1: p4 size 2097152 extends beyond EOD, truncated [ 153.466890][T16817] loop0: p4 size 2097152 extends beyond EOD, truncated 01:33:51 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 153.477713][T16795] loop5: detected capacity change from 0 to 6 [ 153.516607][ T1028] loop5: p2 p4 [ 153.520531][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 153.524529][T16859] loop2: detected capacity change from 0 to 1 [ 153.533974][T16860] loop3: detected capacity change from 0 to 1 [ 153.539497][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 153.559444][T16880] loop1: detected capacity change from 0 to 18 [ 153.559489][T16795] loop5: p2 p4 [ 153.566078][T16860] loop3: p2 p4 [ 153.571454][T16795] loop5: p2 size 327680 extends beyond EOD, truncated [ 153.572843][T16860] loop3: p2 size 327680 extends beyond EOD, truncated [ 153.585230][T16886] loop0: detected capacity change from 0 to 1 [ 153.586753][T16860] FAULT_INJECTION: forcing a failure. [ 153.586753][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 153.600871][T16795] loop5: p4 size 2097152 extends beyond EOD, truncated [ 153.604991][T16860] CPU: 1 PID: 16860 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 153.620689][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.630742][T16860] Call Trace: [ 153.634010][T16860] dump_stack+0x137/0x19d [ 153.638324][T16860] should_fail+0x23c/0x250 [ 153.642719][T16860] ? __kernfs_new_node+0x6a/0x330 [ 153.647724][T16860] __should_failslab+0x81/0x90 [ 153.652469][T16860] should_failslab+0x5/0x20 [ 153.656993][T16860] kmem_cache_alloc+0x46/0x300 [ 153.661752][T16860] __kernfs_new_node+0x6a/0x330 [ 153.666599][T16860] ? __cond_resched+0x11/0x40 [ 153.671256][T16860] ? mutex_lock+0x9/0x30 [ 153.675610][T16860] kernfs_new_node+0x5b/0xd0 [ 153.680179][T16860] __kernfs_create_file+0x45/0x1a0 [ 153.685384][T16860] sysfs_add_file_mode_ns+0x1c1/0x250 [ 153.690745][T16860] sysfs_merge_group+0xb5/0x190 [ 153.695598][T16860] dpm_sysfs_add+0x9d/0x1d0 [ 153.700082][T16860] device_add+0x925/0xe50 [ 153.704393][T16860] add_partition+0x35b/0x580 [ 153.708966][T16860] blk_add_partitions+0x583/0xa80 [ 153.713978][T16860] bdev_disk_changed+0x1a7/0x200 [ 153.718895][T16860] loop_set_status+0x75f/0x7e0 [ 153.723704][T16860] lo_ioctl+0x758/0x11f0 [ 153.727928][T16860] ? path_openat+0x19ab/0x20b0 [ 153.732676][T16860] ? putname+0xa5/0xc0 [ 153.736737][T16860] ? ___cache_free+0x3c/0x300 [ 153.741597][T16860] ? blkdev_common_ioctl+0x9c3/0x1010 [ 153.746950][T16860] ? selinux_file_ioctl+0x8e0/0x970 [ 153.752155][T16860] ? lo_release+0x120/0x120 [ 153.756710][T16860] blkdev_ioctl+0x1d0/0x3c0 [ 153.761190][T16860] block_ioctl+0x6d/0x80 [ 153.765409][T16860] ? blkdev_iopoll+0x70/0x70 [ 153.770009][T16860] __se_sys_ioctl+0xcb/0x140 [ 153.774582][T16860] __x64_sys_ioctl+0x3f/0x50 [ 153.779171][T16860] do_syscall_64+0x34/0x50 [ 153.783643][T16860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.789529][T16860] RIP: 0033:0x466217 [ 153.793472][T16860] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 153.813056][T16860] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 153.821484][T16860] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 01:33:51 executing program 5: syz_read_part_table(0xe00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:51 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 153.829433][T16860] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 153.837401][T16860] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 153.845354][T16860] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 153.853306][T16860] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 153.865891][T16860] loop3: p2 could not be added: 12 [ 153.871122][T16860] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:51 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:51 executing program 3 (fault-call:0 fault-nth:85): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 153.875674][T16886] loop0: p2 p4 [ 153.882492][T16880] loop1: p2 p4 [ 153.886243][T16880] loop1: p2 size 327680 extends beyond EOD, truncated [ 153.890955][T16886] loop0: p2 size 327680 extends beyond EOD, truncated [ 153.903478][T16886] loop0: p4 size 2097152 extends beyond EOD, truncated [ 153.911120][T16880] loop1: p4 size 2097152 extends beyond EOD, truncated [ 153.919290][T16901] loop5: detected capacity change from 0 to 7 01:33:51 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:51 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 153.933145][T16916] loop2: detected capacity change from 0 to 1 [ 153.959361][ T1028] loop5: p2 p4 [ 153.962943][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 153.970754][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 153.970939][T16924] loop3: detected capacity change from 0 to 1 [ 153.997517][T16901] loop5: p2 p4 [ 154.002208][T16880] loop1: detected capacity change from 0 to 18 [ 154.014465][T16901] loop5: p2 size 327680 extends beyond EOD, truncated [ 154.023708][T16901] loop5: p4 size 2097152 extends beyond EOD, truncated [ 154.031173][T16924] loop3: p2 p4 [ 154.034792][T16924] loop3: p2 size 327680 extends beyond EOD, truncated [ 154.035554][T16880] loop1: p2 p4 [ 154.045033][T16949] loop0: detected capacity change from 0 to 1 [ 154.055915][T16924] FAULT_INJECTION: forcing a failure. [ 154.055915][T16924] name failslab, interval 1, probability 0, space 0, times 0 [ 154.056969][T16880] loop1: p2 size 327680 extends beyond EOD, [ 154.068578][T16924] CPU: 1 PID: 16924 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 154.068583][T16880] truncated [ 154.074558][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.094587][T16880] loop1: p4 size 2097152 extends beyond EOD, [ 154.096432][T16924] Call Trace: [ 154.096440][T16924] dump_stack+0x137/0x19d [ 154.102518][T16880] truncated [ 154.113158][T16924] should_fail+0x23c/0x250 [ 154.117556][T16924] ? __kernfs_new_node+0x6a/0x330 [ 154.122562][T16924] __should_failslab+0x81/0x90 [ 154.127304][T16924] should_failslab+0x5/0x20 [ 154.131804][T16924] kmem_cache_alloc+0x46/0x300 [ 154.136549][T16924] __kernfs_new_node+0x6a/0x330 [ 154.141391][T16924] ? __mutex_lock_slowpath+0xa/0x10 [ 154.146568][T16924] ? mutex_lock+0x23/0x30 [ 154.150958][T16924] kernfs_new_node+0x5b/0xd0 [ 154.155528][T16924] __kernfs_create_file+0x45/0x1a0 [ 154.160637][T16924] sysfs_add_file_mode_ns+0x1c1/0x250 [ 154.165991][T16924] sysfs_create_file_ns+0x8b/0xd0 [ 154.170998][T16924] device_create_file+0xa7/0x110 [ 154.175996][T16924] device_add+0xaf2/0xe50 [ 154.180312][T16924] add_partition+0x35b/0x580 [ 154.184996][T16924] blk_add_partitions+0x583/0xa80 [ 154.190002][T16924] bdev_disk_changed+0x1a7/0x200 [ 154.195209][T16924] loop_set_status+0x75f/0x7e0 [ 154.200041][T16924] lo_ioctl+0x758/0x11f0 [ 154.204264][T16924] ? path_openat+0x19ab/0x20b0 [ 154.209013][T16924] ? putname+0xa5/0xc0 [ 154.213499][T16924] ? ___cache_free+0x3c/0x300 [ 154.218165][T16924] ? blkdev_common_ioctl+0x9c3/0x1010 [ 154.223516][T16924] ? selinux_file_ioctl+0x8e0/0x970 [ 154.228742][T16924] ? lo_release+0x120/0x120 [ 154.233242][T16924] blkdev_ioctl+0x1d0/0x3c0 [ 154.237726][T16924] block_ioctl+0x6d/0x80 [ 154.241949][T16924] ? blkdev_iopoll+0x70/0x70 [ 154.246518][T16924] __se_sys_ioctl+0xcb/0x140 [ 154.251187][T16924] __x64_sys_ioctl+0x3f/0x50 [ 154.255807][T16924] do_syscall_64+0x34/0x50 [ 154.260318][T16924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.266325][T16924] RIP: 0033:0x466217 [ 154.270204][T16924] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 154.289792][T16924] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 154.298185][T16924] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 154.306143][T16924] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 154.314378][T16924] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 154.322345][T16924] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 154.330306][T16924] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 154.342160][T16924] loop3: p2 could not be added: 12 01:33:52 executing program 1: syz_read_part_table(0x269d, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:52 executing program 3 (fault-call:0 fault-nth:86): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 154.347437][T16924] loop3: p4 size 2097152 extends beyond EOD, truncated [ 154.354988][ T1028] loop0: p2 p4 [ 154.358653][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 154.366960][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 154.376078][T16901] loop5: detected capacity change from 0 to 7 [ 154.378485][T16949] loop0: p2 p4 [ 154.385975][T16949] loop0: p2 size 327680 extends beyond EOD, truncated 01:33:52 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 154.393112][T16949] loop0: p4 size 2097152 extends beyond EOD, truncated [ 154.416382][ T1028] loop0: p2 p4 [ 154.420153][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 154.428183][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 154.435942][T16901] loop5: p2 p4 [ 154.439558][T16901] loop5: p2 size 327680 extends beyond EOD, truncated [ 154.451081][T16993] loop2: detected capacity change from 0 to 1 [ 154.459093][T16995] loop1: detected capacity change from 0 to 19 [ 154.461754][T16901] loop5: p4 size 2097152 extends beyond EOD, truncated [ 154.474606][T16994] loop3: detected capacity change from 0 to 1 01:33:52 executing program 5: syz_read_part_table(0xe09, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:52 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 154.505502][T16995] loop1: p2 p4 [ 154.509753][T16995] loop1: p2 size 327680 extends beyond EOD, truncated [ 154.518396][T16994] loop3: p2 p4 [ 154.522040][T16994] loop3: p2 size 327680 extends beyond EOD, truncated [ 154.529672][T16995] loop1: p4 size 2097152 extends beyond EOD, truncated [ 154.553337][T16994] FAULT_INJECTION: forcing a failure. [ 154.553337][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 154.559551][T17023] loop0: detected capacity change from 0 to 1 [ 154.566107][T16994] CPU: 1 PID: 16994 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 154.581155][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.591307][T16994] Call Trace: [ 154.594570][T16994] dump_stack+0x137/0x19d [ 154.598924][T16994] should_fail+0x23c/0x250 [ 154.603340][T16994] __should_failslab+0x81/0x90 [ 154.608085][T16994] ? __kernfs_new_node+0x41/0x330 [ 154.613090][T16994] should_failslab+0x5/0x20 [ 154.617578][T16994] __kmalloc_track_caller+0x64/0x360 [ 154.622899][T16994] kstrdup_const+0x51/0x90 [ 154.627467][T16994] __kernfs_new_node+0x41/0x330 [ 154.632299][T16994] kernfs_new_node+0x5b/0xd0 [ 154.636917][T16994] kernfs_create_link+0x68/0x120 [ 154.641918][T16994] sysfs_do_create_link_sd+0x98/0x110 [ 154.647647][T16994] sysfs_create_link+0x4d/0x60 [ 154.652419][T16994] device_add+0xbe6/0xe50 [ 154.656759][T16994] add_partition+0x35b/0x580 [ 154.661363][T16994] blk_add_partitions+0x583/0xa80 [ 154.666399][T16994] bdev_disk_changed+0x1a7/0x200 [ 154.671433][T16994] loop_set_status+0x75f/0x7e0 [ 154.676790][T16994] lo_ioctl+0x758/0x11f0 [ 154.681017][T16994] ? path_openat+0x19ab/0x20b0 [ 154.685770][T16994] ? putname+0xa5/0xc0 [ 154.689903][T16994] ? ___cache_free+0x3c/0x300 [ 154.694562][T16994] ? blkdev_common_ioctl+0x9c3/0x1010 [ 154.700002][T16994] ? selinux_file_ioctl+0x8e0/0x970 [ 154.705275][T16994] ? lo_release+0x120/0x120 [ 154.709769][T16994] blkdev_ioctl+0x1d0/0x3c0 [ 154.714249][T16994] block_ioctl+0x6d/0x80 [ 154.718541][T16994] ? blkdev_iopoll+0x70/0x70 [ 154.723106][T16994] __se_sys_ioctl+0xcb/0x140 [ 154.727673][T16994] __x64_sys_ioctl+0x3f/0x50 [ 154.732291][T16994] do_syscall_64+0x34/0x50 [ 154.736687][T16994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.742567][T16994] RIP: 0033:0x466217 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 154.746472][T16994] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 154.766056][T16994] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 154.774490][T16994] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 154.782439][T16994] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 154.790389][T16994] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 154.798353][T16994] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 154.806304][T16994] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 154.826091][T17023] loop0: p2 p4 [ 154.829632][T17025] loop2: detected capacity change from 0 to 1 [ 154.830413][T16994] loop3: p2 could not be added: 12 [ 154.836508][T17023] loop0: p2 size 327680 extends beyond EOD, [ 154.841050][T16994] loop3: p4 size 2097152 extends beyond EOD, truncated [ 154.853906][T17023] truncated 01:33:52 executing program 3 (fault-call:0 fault-nth:87): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 154.858156][ T1028] loop1: p2 p4 [ 154.861111][T17023] loop0: p4 size 2097152 extends beyond EOD, truncated [ 154.861685][T17036] loop5: detected capacity change from 0 to 7 [ 154.873578][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 154.882115][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:52 executing program 1: syz_read_part_table(0x3f00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x6ec1, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:52 executing program 0: syz_read_part_table(0xbee, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:52 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 154.926992][T17036] loop5: p2 p4 [ 154.930729][T17036] loop5: p2 size 327680 extends beyond EOD, truncated [ 154.954480][T17036] loop5: p4 size 2097152 extends beyond EOD, truncated [ 154.961758][T17068] loop3: detected capacity change from 0 to 1 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x6ec1, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 154.974102][ T1028] loop5: p2 p4 [ 154.977975][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 154.985648][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 154.995118][T17082] loop2: detected capacity change from 0 to 1 [ 155.005135][T17083] loop1: detected capacity change from 0 to 31 [ 155.011397][T17087] loop0: detected capacity change from 0 to 5 [ 155.015433][T17068] loop3: p2 p4 [ 155.024000][T17068] loop3: p2 size 327680 extends beyond EOD, truncated [ 155.035146][T17036] loop5: detected capacity change from 0 to 7 [ 155.041190][T17068] FAULT_INJECTION: forcing a failure. [ 155.041190][T17068] name failslab, interval 1, probability 0, space 0, times 0 [ 155.054070][T17068] CPU: 0 PID: 17068 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 155.057744][T17083] loop1: p2 p4 [ 155.064270][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.064285][T17068] Call Trace: [ 155.064292][T17068] dump_stack+0x137/0x19d [ 155.064315][T17068] should_fail+0x23c/0x250 [ 155.067988][T17083] loop1: p2 size 327680 extends beyond EOD, [ 155.077930][T17068] __should_failslab+0x81/0x90 [ 155.077960][T17068] ? kobject_create_and_add+0x37/0x160 [ 155.077981][T17068] should_failslab+0x5/0x20 [ 155.081271][T17083] truncated [ 155.084091][T17083] loop1: p4 size 2097152 extends beyond EOD, [ 155.085581][T17068] kmem_cache_alloc_trace+0x49/0x320 [ 155.085606][T17068] ? device_add+0xa45/0xe50 [ 155.085627][T17068] kobject_create_and_add+0x37/0x160 [ 155.091758][T17083] truncated [ 155.139758][T17068] add_partition+0x3e8/0x580 [ 155.144346][T17068] blk_add_partitions+0x583/0xa80 [ 155.149367][T17068] bdev_disk_changed+0x1a7/0x200 [ 155.154344][T17068] loop_set_status+0x75f/0x7e0 [ 155.159264][T17068] lo_ioctl+0x758/0x11f0 [ 155.163637][T17068] ? path_openat+0x19ab/0x20b0 [ 155.175083][T17068] ? putname+0xa5/0xc0 [ 155.179189][T17068] ? ___cache_free+0x3c/0x300 [ 155.183848][T17068] ? blkdev_common_ioctl+0x9c3/0x1010 [ 155.189200][T17068] ? selinux_file_ioctl+0x8e0/0x970 [ 155.194381][T17068] ? lo_release+0x120/0x120 [ 155.198865][T17068] blkdev_ioctl+0x1d0/0x3c0 [ 155.203344][T17068] block_ioctl+0x6d/0x80 [ 155.207564][T17068] ? blkdev_iopoll+0x70/0x70 [ 155.212133][T17068] __se_sys_ioctl+0xcb/0x140 [ 155.216755][T17068] __x64_sys_ioctl+0x3f/0x50 [ 155.221322][T17068] do_syscall_64+0x34/0x50 [ 155.225777][T17068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.231679][T17068] RIP: 0033:0x466217 [ 155.235576][T17068] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.255240][T17068] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 155.263978][T17068] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 155.273283][T17068] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 155.281239][T17068] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 155.289298][T17068] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 155.297263][T17068] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 155.309504][T17068] loop3: p2 could not be added: 12 [ 155.314711][T17068] loop3: p4 size 2097152 extends beyond EOD, truncated [ 155.323002][ T1028] loop3: p2 p4 [ 155.325482][T17036] loop5: p2 p4 [ 155.327000][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 155.330000][T17036] loop5: p2 size 327680 extends beyond EOD, truncated [ 155.344623][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 155.352218][T17036] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:53 executing program 5: syz_read_part_table(0xe0a, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:53 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 3 (fault-call:0 fault-nth:88): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 0: syz_read_part_table(0xbee, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 155.381276][T17083] loop1: detected capacity change from 0 to 31 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 155.428353][T17083] loop1: p2 p4 [ 155.432222][T17083] loop1: p2 size 327680 extends beyond EOD, truncated [ 155.446026][T17083] loop1: p4 size 2097152 extends beyond EOD, truncated [ 155.447993][T17139] loop3: detected capacity change from 0 to 1 [ 155.465085][ T1028] loop1: p2 p4 [ 155.468786][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:53 executing program 1: syz_read_part_table(0x4000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 155.476596][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 155.483542][T17141] loop2: detected capacity change from 0 to 1 [ 155.484242][T17156] loop5: detected capacity change from 0 to 7 [ 155.490429][T17137] loop0: detected capacity change from 0 to 5 01:33:53 executing program 0: syz_read_part_table(0xbee, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 155.544549][T17139] loop3: p2 p4 [ 155.550235][T17156] loop5: p2 p4 [ 155.553738][T17156] loop5: p2 size 327680 extends beyond EOD, truncated [ 155.561186][T17139] loop3: p2 size 327680 extends beyond EOD, truncated [ 155.568929][T17156] loop5: p4 size 2097152 extends beyond EOD, truncated [ 155.587620][T17139] FAULT_INJECTION: forcing a failure. [ 155.587620][T17139] name failslab, interval 1, probability 0, space 0, times 0 [ 155.600437][T17139] CPU: 1 PID: 17139 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 155.609313][T17139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.619366][T17139] Call Trace: [ 155.622682][T17139] dump_stack+0x137/0x19d [ 155.627017][T17139] should_fail+0x23c/0x250 [ 155.631505][T17139] ? __kernfs_new_node+0x6a/0x330 [ 155.636695][T17139] __should_failslab+0x81/0x90 [ 155.641507][T17139] should_failslab+0x5/0x20 [ 155.646010][T17139] kmem_cache_alloc+0x46/0x300 [ 155.650788][T17139] ? __switch_to+0x14e/0x4b0 [ 155.655418][T17139] __kernfs_new_node+0x6a/0x330 [ 155.660354][T17139] ? schedule+0x67/0x90 [ 155.664497][T17139] ? schedule_timeout+0x42/0x240 [ 155.668592][T17188] loop2: detected capacity change from 0 to 1 [ 155.669434][T17139] kernfs_create_dir_ns+0x5e/0x140 [ 155.669457][T17139] sysfs_create_dir_ns+0x94/0x190 [ 155.675743][T17187] loop1: detected capacity change from 0 to 32 [ 155.680623][T17139] kobject_add_internal+0x488/0x880 [ 155.680650][T17139] kobject_add+0xbe/0x130 [ 155.690129][T17189] loop0: detected capacity change from 0 to 5 [ 155.692069][T17139] kobject_create_and_add+0xdd/0x160 [ 155.692146][T17139] add_partition+0x3e8/0x580 [ 155.692166][T17139] blk_add_partitions+0x583/0xa80 [ 155.722571][T17139] bdev_disk_changed+0x1a7/0x200 [ 155.727516][T17139] loop_set_status+0x75f/0x7e0 [ 155.732259][T17139] lo_ioctl+0x758/0x11f0 [ 155.736478][T17139] ? path_openat+0x19ab/0x20b0 [ 155.741249][T17139] ? putname+0xa5/0xc0 [ 155.745305][T17139] ? ___cache_free+0x3c/0x300 [ 155.749980][T17139] ? blkdev_common_ioctl+0x9c3/0x1010 [ 155.755345][T17139] ? selinux_file_ioctl+0x8e0/0x970 [ 155.760702][T17139] ? lo_release+0x120/0x120 [ 155.765188][T17139] blkdev_ioctl+0x1d0/0x3c0 [ 155.769769][T17139] block_ioctl+0x6d/0x80 [ 155.774070][T17139] ? blkdev_iopoll+0x70/0x70 [ 155.778638][T17139] __se_sys_ioctl+0xcb/0x140 [ 155.783215][T17139] __x64_sys_ioctl+0x3f/0x50 [ 155.787851][T17139] do_syscall_64+0x34/0x50 [ 155.792317][T17139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.798229][T17139] RIP: 0033:0x466217 [ 155.802188][T17139] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.822830][T17139] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 155.831270][T17139] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 155.839247][T17139] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 155.847239][T17139] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 155.855220][T17139] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 155.863244][T17139] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 155.871378][T17139] kobject_add_internal failed for holders (error: -12 parent: loop3p2) [ 155.879669][T17139] kobject_create_and_add: kobject_add error: -12 [ 155.886505][T17139] loop3: p2 could not be added: 12 [ 155.891712][T17139] loop3: p4 size 2097152 extends beyond EOD, truncated [ 155.908384][T17187] loop1: p2 p4 [ 155.913082][T17187] loop1: p2 size 327680 extends beyond EOD, truncated [ 155.920763][T17156] loop5: detected capacity change from 0 to 7 [ 155.920946][T17187] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:53 executing program 5: syz_read_part_table(0xe0b, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:53 executing program 3 (fault-call:0 fault-nth:89): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 0: syz_read_part_table(0xbee, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:53 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 155.962692][T17156] loop5: p2 p4 [ 155.966395][T17156] loop5: p2 size 327680 extends beyond EOD, truncated [ 155.983907][T17156] loop5: p4 size 2097152 extends beyond EOD, truncated [ 155.992059][T17187] loop1: detected capacity change from 0 to 32 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 156.030420][ T1028] loop1: p2 p4 [ 156.034049][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 156.041747][T17234] loop2: detected capacity change from 0 to 1 [ 156.047986][T17235] loop3: detected capacity change from 0 to 1 [ 156.054491][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 156.061900][T17242] loop0: detected capacity change from 0 to 5 [ 156.073115][T17187] loop1: p2 p4 [ 156.075804][T17235] loop3: p2 p4 [ 156.080232][T17235] loop3: p2 size 327680 extends beyond EOD, truncated [ 156.085725][T17187] loop1: p2 size 327680 extends beyond EOD, truncated [ 156.094326][T17235] FAULT_INJECTION: forcing a failure. [ 156.094326][T17235] name failslab, interval 1, probability 0, space 0, times 0 [ 156.106968][T17235] CPU: 0 PID: 17235 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 156.115764][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.125915][T17235] Call Trace: [ 156.129201][T17235] dump_stack+0x137/0x19d [ 156.133623][T17235] should_fail+0x23c/0x250 [ 156.138017][T17235] ? xas_create+0x3fb/0xb30 [ 156.142500][T17235] __should_failslab+0x81/0x90 [ 156.147245][T17235] should_failslab+0x5/0x20 [ 156.151735][T17235] kmem_cache_alloc+0x46/0x300 [ 156.156479][T17235] ? kernfs_activate+0x2b9/0x2d0 [ 156.161397][T17235] xas_create+0x3fb/0xb30 [ 156.168779][T17235] xas_store+0x70/0xc90 [ 156.173002][T17235] ? kernfs_get+0x2b/0x50 [ 156.177311][T17235] ? kobject_add_internal+0x6f8/0x880 [ 156.182683][T17235] ? kobject_add+0xbe/0x130 [ 156.187184][T17235] __xa_insert+0x2c9/0x4d0 [ 156.191667][T17235] add_partition+0x4a4/0x580 [ 156.196242][T17235] blk_add_partitions+0x583/0xa80 [ 156.201250][T17235] bdev_disk_changed+0x1a7/0x200 [ 156.206171][T17235] loop_set_status+0x75f/0x7e0 [ 156.210922][T17235] lo_ioctl+0x758/0x11f0 [ 156.215147][T17235] ? path_openat+0x19ab/0x20b0 [ 156.219900][T17235] ? putname+0xa5/0xc0 [ 156.224034][T17235] ? ___cache_free+0x3c/0x300 [ 156.228699][T17235] ? blkdev_common_ioctl+0x9c3/0x1010 [ 156.234125][T17235] ? selinux_file_ioctl+0x8e0/0x970 [ 156.239308][T17235] ? lo_release+0x120/0x120 [ 156.243793][T17235] blkdev_ioctl+0x1d0/0x3c0 [ 156.248450][T17235] block_ioctl+0x6d/0x80 [ 156.252678][T17235] ? blkdev_iopoll+0x70/0x70 [ 156.257247][T17235] __se_sys_ioctl+0xcb/0x140 [ 156.261826][T17235] __x64_sys_ioctl+0x3f/0x50 [ 156.266483][T17235] do_syscall_64+0x34/0x50 [ 156.270885][T17235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.276774][T17235] RIP: 0033:0x466217 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 156.280656][T17235] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 156.302993][T17235] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 156.311394][T17235] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 156.319404][T17235] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 01:33:54 executing program 1: syz_read_part_table(0x4800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 156.327511][T17235] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 156.335473][T17235] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 156.343525][T17235] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 156.354770][T17187] loop1: p4 size 2097152 extends beyond EOD, truncated [ 156.361446][T17235] loop3: p4 size 2097152 extends beyond EOD, truncated [ 156.368813][T17259] loop5: detected capacity change from 0 to 16384 01:33:54 executing program 0: syz_read_part_table(0xbee, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 156.447670][T17286] loop2: detected capacity change from 0 to 1 [ 156.459274][T17259] loop5: detected capacity change from 0 to 7 [ 156.475731][T17300] loop1: detected capacity change from 0 to 36 [ 156.482257][T17301] loop0: detected capacity change from 0 to 5 01:33:54 executing program 5: syz_read_part_table(0xe0c, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 3 (fault-call:0 fault-nth:90): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:54 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 0: syz_read_part_table(0xbee, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 156.505395][T17259] loop5: p2 p4 [ 156.509059][T17259] loop5: p2 size 327680 extends beyond EOD, truncated [ 156.517181][T17259] loop5: p4 size 2097152 extends beyond EOD, truncated [ 156.525985][ T1028] loop1: p2 p4 [ 156.529673][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 156.543864][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 156.552339][T17300] loop1: p2 p4 [ 156.556062][T17300] loop1: p2 size 327680 extends beyond EOD, truncated [ 156.563301][T17300] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 156.605349][T17327] loop2: detected capacity change from 0 to 1 [ 156.611713][T17331] loop3: detected capacity change from 0 to 1 [ 156.618445][T17340] loop0: detected capacity change from 0 to 5 [ 156.631862][T17346] loop5: detected capacity change from 0 to 7 [ 156.633509][T17300] loop1: detected capacity change from 0 to 36 [ 156.638625][T17331] loop3: p2 p4 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 156.649037][T17331] loop3: p2 size 327680 extends beyond EOD, truncated [ 156.656583][T17331] FAULT_INJECTION: forcing a failure. [ 156.656583][T17331] name failslab, interval 1, probability 0, space 0, times 0 [ 156.669446][T17331] CPU: 0 PID: 17331 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 156.679598][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.689652][T17331] Call Trace: [ 156.692925][T17331] dump_stack+0x137/0x19d [ 156.697801][T17331] should_fail+0x23c/0x250 [ 156.702280][T17331] ? xas_create+0x3fb/0xb30 [ 156.706900][T17331] __should_failslab+0x81/0x90 [ 156.711656][T17331] should_failslab+0x5/0x20 [ 156.716194][T17331] kmem_cache_alloc+0x46/0x300 [ 156.720959][T17331] ? kernfs_activate+0x2b9/0x2d0 [ 156.725970][T17331] xas_create+0x3fb/0xb30 [ 156.730300][T17331] xas_store+0x70/0xc90 [ 156.734465][T17331] ? kernfs_get+0x2b/0x50 [ 156.738804][T17331] ? kobject_add_internal+0x6f8/0x880 [ 156.744165][T17331] ? kobject_add+0xbe/0x130 [ 156.748691][T17331] __xa_insert+0x2c9/0x4d0 [ 156.753119][T17331] add_partition+0x4a4/0x580 [ 156.757709][T17331] blk_add_partitions+0x583/0xa80 [ 156.762727][T17331] bdev_disk_changed+0x1a7/0x200 [ 156.767648][T17331] loop_set_status+0x75f/0x7e0 [ 156.772394][T17331] lo_ioctl+0x758/0x11f0 [ 156.776624][T17331] ? path_openat+0x19ab/0x20b0 [ 156.781414][T17331] ? putname+0xa5/0xc0 [ 156.785470][T17331] ? ___cache_free+0x3c/0x300 [ 156.790160][T17331] ? blkdev_common_ioctl+0x9c3/0x1010 [ 156.795509][T17331] ? selinux_file_ioctl+0x8e0/0x970 [ 156.800710][T17331] ? lo_release+0x120/0x120 [ 156.805307][T17331] blkdev_ioctl+0x1d0/0x3c0 [ 156.809795][T17331] block_ioctl+0x6d/0x80 [ 156.814021][T17331] ? blkdev_iopoll+0x70/0x70 [ 156.818601][T17331] __se_sys_ioctl+0xcb/0x140 [ 156.823177][T17331] __x64_sys_ioctl+0x3f/0x50 [ 156.827759][T17331] do_syscall_64+0x34/0x50 [ 156.832193][T17331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.838092][T17331] RIP: 0033:0x466217 [ 156.841990][T17331] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 156.862551][T17331] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 156.870995][T17331] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 156.879012][T17331] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 156.887003][T17331] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 156.894969][T17331] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 156.902950][T17331] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 156.916626][T17331] loop3: p4 size 2097152 extends beyond EOD, truncated [ 156.924675][ T1028] loop3: p2 p4 [ 156.925552][T17300] loop1: p2 p4 [ 156.928930][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 156.932121][T17300] loop1: p2 size 327680 extends beyond EOD, truncated [ 156.938763][T17346] loop5: p2 p4 01:33:54 executing program 1: syz_read_part_table(0x4c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:54 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:54 executing program 3 (fault-call:0 fault-nth:91): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 156.956129][T17300] loop1: p4 size 2097152 extends beyond EOD, truncated [ 156.958965][T17346] loop5: p2 size 327680 extends beyond EOD, truncated [ 156.970017][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 156.970495][T17346] loop5: p4 size 2097152 extends beyond EOD, truncated [ 157.009524][T17346] loop5: detected capacity change from 0 to 7 [ 157.046990][T17400] loop0: detected capacity change from 0 to 5 [ 157.054775][T17402] loop3: detected capacity change from 0 to 1 [ 157.059365][T17407] loop2: detected capacity change from 0 to 1 [ 157.067624][T17346] loop5: p2 p4 [ 157.075569][T17346] loop5: p2 size 327680 extends beyond EOD, truncated [ 157.075730][ T1028] loop3: p2 p4 [ 157.087412][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 157.093821][T17346] loop5: p4 size 2097152 extends beyond EOD, truncated [ 157.102325][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 157.104055][T17423] loop1: detected capacity change from 0 to 38 [ 157.116294][T17402] loop3: p2 p4 [ 157.119951][T17402] loop3: p2 size 327680 extends beyond EOD, truncated [ 157.127304][T17402] FAULT_INJECTION: forcing a failure. [ 157.127304][T17402] name failslab, interval 1, probability 0, space 0, times 0 [ 157.139943][T17402] CPU: 1 PID: 17402 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 157.148841][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.158891][T17402] Call Trace: [ 157.162263][T17402] dump_stack+0x137/0x19d [ 157.165286][T17423] loop1: p2 p4 [ 157.166586][T17402] should_fail+0x23c/0x250 [ 157.166606][T17402] ? __kernfs_new_node+0x6a/0x330 [ 157.170118][T17423] loop1: p2 size 327680 extends beyond EOD, [ 157.174434][T17402] __should_failslab+0x81/0x90 [ 157.179468][T17423] truncated [ 157.185395][T17402] should_failslab+0x5/0x20 [ 157.197755][T17402] kmem_cache_alloc+0x46/0x300 [ 157.200350][T17423] loop1: p4 size 2097152 extends beyond EOD, [ 157.202582][T17402] __kernfs_new_node+0x6a/0x330 [ 157.202605][T17402] ? __cond_resched+0x11/0x40 [ 157.208662][T17423] truncated [ 157.213475][T17402] ? mutex_lock+0x9/0x30 [ 157.225506][T17402] kernfs_new_node+0x5b/0xd0 [ 157.230117][T17402] __kernfs_create_file+0x45/0x1a0 [ 157.235208][T17402] sysfs_add_file_mode_ns+0x1c1/0x250 [ 157.240619][T17402] internal_create_group+0x2e4/0x850 [ 157.245886][T17402] sysfs_create_groups+0x3d/0xf0 [ 157.250821][T17402] device_add+0x4dc/0xe50 [ 157.255218][T17402] add_partition+0x35b/0x580 [ 157.259794][T17402] blk_add_partitions+0x583/0xa80 [ 157.264802][T17402] bdev_disk_changed+0x1a7/0x200 [ 157.269836][T17402] loop_set_status+0x75f/0x7e0 [ 157.274659][T17402] lo_ioctl+0x758/0x11f0 [ 157.278901][T17402] ? path_openat+0x19ab/0x20b0 [ 157.283735][T17402] ? putname+0xa5/0xc0 [ 157.287816][T17402] ? ___cache_free+0x3c/0x300 [ 157.292476][T17402] ? blkdev_common_ioctl+0x9c3/0x1010 [ 157.297828][T17402] ? selinux_file_ioctl+0x8e0/0x970 [ 157.303074][T17402] ? lo_release+0x120/0x120 [ 157.307572][T17402] blkdev_ioctl+0x1d0/0x3c0 [ 157.312093][T17402] block_ioctl+0x6d/0x80 [ 157.316345][T17402] ? blkdev_iopoll+0x70/0x70 [ 157.320921][T17402] __se_sys_ioctl+0xcb/0x140 [ 157.325497][T17402] __x64_sys_ioctl+0x3f/0x50 [ 157.330086][T17402] do_syscall_64+0x34/0x50 [ 157.334523][T17402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 157.340401][T17402] RIP: 0033:0x466217 01:33:55 executing program 5: syz_read_part_table(0xf00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:55 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 157.344274][T17402] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.363870][T17402] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 157.372411][T17402] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 157.380363][T17402] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 157.388679][T17402] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 157.396682][T17402] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 157.404713][T17402] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 157.421028][T17402] loop3: p2 could not be added: 12 [ 157.426313][T17402] loop3: p4 size 2097152 extends beyond EOD, truncated [ 157.444861][T17423] loop1: detected capacity change from 0 to 38 01:33:55 executing program 3 (fault-call:0 fault-nth:92): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 157.465595][T17450] loop0: detected capacity change from 0 to 5 [ 157.477546][T17459] loop5: detected capacity change from 0 to 7 [ 157.495430][T17423] loop1: p2 p4 [ 157.499081][T17423] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:55 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 1: syz_read_part_table(0x5400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 157.513803][T17459] loop5: p2 p4 [ 157.518048][T17459] loop5: p2 size 327680 extends beyond EOD, truncated [ 157.524991][T17423] loop1: p4 size 2097152 extends beyond EOD, truncated [ 157.546281][T17479] loop3: detected capacity change from 0 to 1 [ 157.548758][T17459] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 157.575485][ T1028] loop3: p2 p4 [ 157.581328][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 157.591496][T17490] loop0: detected capacity change from 0 to 5 [ 157.599538][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 157.612436][T17459] loop5: detected capacity change from 0 to 7 [ 157.619498][T17479] loop3: p2 p4 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 157.623055][T17479] loop3: p2 size 327680 extends beyond EOD, truncated [ 157.631976][T17479] FAULT_INJECTION: forcing a failure. [ 157.631976][T17479] name failslab, interval 1, probability 0, space 0, times 0 [ 157.644617][T17479] CPU: 1 PID: 17479 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 157.653434][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.663500][T17479] Call Trace: [ 157.666785][T17479] dump_stack+0x137/0x19d [ 157.671193][T17479] should_fail+0x23c/0x250 [ 157.675676][T17479] ? __kernfs_new_node+0x6a/0x330 [ 157.680761][T17479] __should_failslab+0x81/0x90 [ 157.685526][T17479] should_failslab+0x5/0x20 [ 157.690035][T17479] kmem_cache_alloc+0x46/0x300 [ 157.691239][T17518] loop1: detected capacity change from 0 to 42 [ 157.694810][T17479] ? idr_alloc_cyclic+0x249/0x2d0 [ 157.694834][T17479] __kernfs_new_node+0x6a/0x330 [ 157.710808][T17479] ? __cond_resched+0x11/0x40 [ 157.715468][T17479] ? rb_first+0x9/0x40 [ 157.719575][T17479] kernfs_new_node+0x5b/0xd0 [ 157.724144][T17479] __kernfs_create_file+0x45/0x1a0 [ 157.729312][T17479] sysfs_add_file_mode_ns+0x1c1/0x250 [ 157.734660][T17479] sysfs_merge_group+0xb5/0x190 [ 157.739556][T17479] dpm_sysfs_add+0x9d/0x1d0 [ 157.744084][T17479] device_add+0x925/0xe50 [ 157.748487][T17479] add_partition+0x35b/0x580 [ 157.753060][T17479] blk_add_partitions+0x583/0xa80 [ 157.758096][T17479] bdev_disk_changed+0x1a7/0x200 [ 157.763023][T17479] loop_set_status+0x75f/0x7e0 [ 157.767780][T17479] lo_ioctl+0x758/0x11f0 [ 157.772018][T17479] ? path_openat+0x19ab/0x20b0 [ 157.776850][T17479] ? putname+0xa5/0xc0 [ 157.780909][T17479] ? ___cache_free+0x3c/0x300 [ 157.785570][T17479] ? blkdev_common_ioctl+0x9c3/0x1010 [ 157.790927][T17479] ? selinux_file_ioctl+0x8e0/0x970 [ 157.796106][T17479] ? lo_release+0x120/0x120 [ 157.800586][T17479] blkdev_ioctl+0x1d0/0x3c0 [ 157.805074][T17479] block_ioctl+0x6d/0x80 [ 157.809306][T17479] ? blkdev_iopoll+0x70/0x70 [ 157.813883][T17479] __se_sys_ioctl+0xcb/0x140 [ 157.818452][T17479] __x64_sys_ioctl+0x3f/0x50 [ 157.823021][T17479] do_syscall_64+0x34/0x50 [ 157.827414][T17479] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 157.833370][T17479] RIP: 0033:0x466217 [ 157.837314][T17479] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 157.858554][T17479] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 157.867697][T17479] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 157.875743][T17479] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 157.883706][T17479] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 157.891673][T17479] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 157.899720][T17479] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 157.908012][T17479] loop3: p2 could not be added: 12 [ 157.913325][T17479] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:55 executing program 5: syz_read_part_table(0x1100, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:55 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 3 (fault-call:0 fault-nth:93): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 157.935527][T17459] loop5: p2 p4 [ 157.936287][T17518] loop1: p2 p4 [ 157.939185][T17459] loop5: p2 size 327680 extends beyond EOD, truncated [ 157.944180][T17518] loop1: p2 size 327680 extends beyond EOD, truncated [ 157.951439][T17459] loop5: p4 size 2097152 extends beyond EOD, truncated [ 157.970668][T17518] loop1: p4 size 2097152 extends beyond EOD, truncated 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 158.025016][T17548] loop0: detected capacity change from 0 to 5 [ 158.032097][T17551] loop3: detected capacity change from 0 to 1 [ 158.042667][T17518] loop1: detected capacity change from 0 to 42 [ 158.065591][ T1028] loop3: p2 p4 [ 158.069165][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 158.076772][T17571] loop5: detected capacity change from 0 to 8 [ 158.077053][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 158.091399][T17551] loop3: p2 p4 [ 158.094946][T17551] loop3: p2 size 327680 extends beyond EOD, truncated [ 158.101939][T17518] loop1: p2 p4 [ 158.105614][T17518] loop1: p2 size 327680 extends beyond EOD, truncated [ 158.112914][T17518] loop1: p4 size 2097152 extends beyond EOD, truncated [ 158.119720][T17551] FAULT_INJECTION: forcing a failure. [ 158.119720][T17551] name failslab, interval 1, probability 0, space 0, times 0 [ 158.132495][T17551] CPU: 0 PID: 17551 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 158.134683][T17571] loop5: p2 p4 [ 158.141301][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.141314][T17551] Call Trace: [ 158.141321][T17551] dump_stack+0x137/0x19d [ 158.141343][T17551] should_fail+0x23c/0x250 [ 158.147071][T17571] loop5: p2 size 327680 extends beyond EOD, [ 158.154825][T17551] ? __kernfs_new_node+0x6a/0x330 [ 158.154847][T17551] __should_failslab+0x81/0x90 [ 158.154868][T17551] should_failslab+0x5/0x20 [ 158.158157][T17571] truncated [ 158.162441][T17551] kmem_cache_alloc+0x46/0x300 [ 158.170075][T17571] loop5: p4 size 2097152 extends beyond EOD, [ 158.172897][T17551] ? idr_alloc_cyclic+0x249/0x2d0 [ 158.177960][T17571] truncated [ 158.182647][T17551] __kernfs_new_node+0x6a/0x330 [ 158.213916][T17551] ? __cond_resched+0x11/0x40 [ 158.218660][T17551] ? rb_first+0x9/0x40 [ 158.222721][T17551] kernfs_new_node+0x5b/0xd0 [ 158.227294][T17551] __kernfs_create_file+0x45/0x1a0 [ 158.232384][T17551] sysfs_add_file_mode_ns+0x1c1/0x250 [ 158.237806][T17551] sysfs_merge_group+0xb5/0x190 [ 158.242638][T17551] dpm_sysfs_add+0x9d/0x1d0 [ 158.247143][T17551] device_add+0x925/0xe50 [ 158.251497][T17551] add_partition+0x35b/0x580 [ 158.256067][T17551] blk_add_partitions+0x583/0xa80 [ 158.261076][T17551] bdev_disk_changed+0x1a7/0x200 [ 158.265998][T17551] loop_set_status+0x75f/0x7e0 [ 158.270804][T17551] lo_ioctl+0x758/0x11f0 [ 158.275028][T17551] ? path_openat+0x19ab/0x20b0 [ 158.279849][T17551] ? putname+0xa5/0xc0 [ 158.283960][T17551] ? ___cache_free+0x3c/0x300 [ 158.288758][T17551] ? blkdev_common_ioctl+0x9c3/0x1010 [ 158.294120][T17551] ? selinux_file_ioctl+0x8e0/0x970 [ 158.299334][T17551] ? lo_release+0x120/0x120 [ 158.303851][T17551] blkdev_ioctl+0x1d0/0x3c0 [ 158.308329][T17551] block_ioctl+0x6d/0x80 [ 158.312549][T17551] ? blkdev_iopoll+0x70/0x70 [ 158.317195][T17551] __se_sys_ioctl+0xcb/0x140 [ 158.321770][T17551] __x64_sys_ioctl+0x3f/0x50 [ 158.326442][T17551] do_syscall_64+0x34/0x50 [ 158.330872][T17551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 158.336876][T17551] RIP: 0033:0x466217 [ 158.340809][T17551] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 158.360401][T17551] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 158.368794][T17551] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 158.376759][T17551] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 158.384802][T17551] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 158.392812][T17551] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 158.400778][T17551] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 01:33:56 executing program 1: syz_read_part_table(0x5500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:56 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 158.413071][T17551] loop3: p2 could not be added: 12 [ 158.418309][T17551] loop3: p4 size 2097152 extends beyond EOD, truncated [ 158.446981][T12399] print_req_error: 38 callbacks suppressed [ 158.446993][T12399] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:33:56 executing program 3 (fault-call:0 fault-nth:94): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 158.456649][T12410] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.466949][T17571] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 158.512888][ T879] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.524615][ T879] buffer_io_error: 32 callbacks suppressed [ 158.524624][ T879] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 158.527877][T17613] loop3: detected capacity change from 0 to 1 [ 158.530497][T17571] loop5: detected capacity change from 0 to 8 [ 158.539322][T17614] loop0: detected capacity change from 0 to 5 01:33:56 executing program 5: syz_read_part_table(0x1200, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 158.544885][ T879] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.567546][ T879] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 158.570738][T17606] loop2: detected capacity change from 0 to 1 [ 158.585983][T17613] loop3: p2 p4 [ 158.593079][T17613] loop3: p2 size 327680 extends beyond EOD, truncated [ 158.605966][T17613] FAULT_INJECTION: forcing a failure. 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 158.605966][T17613] name failslab, interval 1, probability 0, space 0, times 0 [ 158.615351][T17606] loop2: p2 p4 [ 158.618603][T17613] CPU: 0 PID: 17613 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 158.630741][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.638365][T17632] loop1: detected capacity change from 0 to 42 [ 158.640788][T17613] Call Trace: [ 158.640798][T17613] dump_stack+0x137/0x19d [ 158.654531][T17613] should_fail+0x23c/0x250 [ 158.659040][T17613] __should_failslab+0x81/0x90 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 158.663796][T17613] should_failslab+0x5/0x20 [ 158.668296][T17613] kmem_cache_alloc_node+0x56/0x2f0 [ 158.673491][T17613] ? __alloc_skb+0xed/0x420 [ 158.677992][T17613] __alloc_skb+0xed/0x420 [ 158.682320][T17613] alloc_uevent_skb+0x5b/0x120 [ 158.687089][T17613] kobject_uevent_env+0x863/0xc40 [ 158.692111][T17613] kobject_uevent+0x18/0x20 [ 158.696654][T17613] add_partition+0x552/0x580 [ 158.701246][T17613] blk_add_partitions+0x583/0xa80 [ 158.706270][T17613] bdev_disk_changed+0x1a7/0x200 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 158.711207][T17613] loop_set_status+0x75f/0x7e0 [ 158.716032][T17613] lo_ioctl+0x758/0x11f0 [ 158.720338][T17613] ? path_openat+0x19ab/0x20b0 [ 158.725172][T17613] ? putname+0xa5/0xc0 [ 158.729353][T17613] ? ___cache_free+0x3c/0x300 [ 158.734050][T17613] ? blkdev_common_ioctl+0x9c3/0x1010 [ 158.739414][T17613] ? selinux_file_ioctl+0x8e0/0x970 [ 158.744610][T17613] ? lo_release+0x120/0x120 [ 158.749112][T17613] blkdev_ioctl+0x1d0/0x3c0 [ 158.753616][T17613] block_ioctl+0x6d/0x80 [ 158.757856][T17613] ? blkdev_iopoll+0x70/0x70 [ 158.762443][T17613] __se_sys_ioctl+0xcb/0x140 [ 158.767029][T17613] __x64_sys_ioctl+0x3f/0x50 [ 158.771609][T17613] do_syscall_64+0x34/0x50 [ 158.776074][T17613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 158.782048][T17613] RIP: 0033:0x466217 [ 158.785957][T17613] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 158.805549][T17613] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 158.814070][T17613] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 158.822026][T17613] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 158.829999][T17613] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 158.837966][T17613] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 158.846061][T17613] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 158.854175][T17613] loop3: p4 size 2097152 extends beyond EOD, truncated [ 158.860198][T17606] loop2: p2 size 327680 extends beyond EOD, truncated [ 158.868469][T17606] loop2: p4 size 2097152 extends beyond EOD, truncated [ 158.902798][T17632] loop1: p2 p4 [ 158.906520][T17632] loop1: p2 size 327680 extends beyond EOD, truncated [ 158.925323][T17632] loop1: p4 size 2097152 extends beyond EOD, truncated [ 158.945402][T17673] loop5: detected capacity change from 0 to 9 [ 159.005372][T17632] loop1: detected capacity change from 0 to 42 [ 159.006527][T17673] loop5: p2 p4 [ 159.015469][T17673] loop5: p2 size 327680 extends beyond EOD, truncated [ 159.023054][T17673] loop5: p4 size 2097152 extends beyond EOD, truncated [ 159.035363][T17632] loop1: p2 p4 [ 159.038896][T17632] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:56 executing program 1: syz_read_part_table(0x6000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:56 executing program 3 (fault-call:0 fault-nth:95): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 159.049978][T17632] loop1: p4 size 2097152 extends beyond EOD, truncated [ 159.072417][T17673] loop5: detected capacity change from 0 to 9 [ 159.134009][ T1028] loop5: p2 p4 [ 159.148671][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 159.158097][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 159.159169][T17721] loop0: detected capacity change from 0 to 5 [ 159.165673][T17719] loop3: detected capacity change from 0 to 1 [ 159.171637][T17717] loop2: detected capacity change from 0 to 1 01:33:56 executing program 5: syz_read_part_table(0x1300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 159.184800][T17673] loop5: p2 p4 [ 159.188056][T17715] loop1: detected capacity change from 0 to 48 [ 159.188775][T17673] loop5: p2 size 327680 extends beyond EOD, truncated [ 159.201609][T17673] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:57 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 159.225640][T17715] loop1: p2 p4 [ 159.229198][T17715] loop1: p2 size 327680 extends beyond EOD, truncated [ 159.236117][T17717] loop2: p2 p4 [ 159.240007][T17719] loop3: p2 p4 [ 159.243515][T17719] loop3: p2 size 327680 extends beyond EOD, truncated [ 159.255329][T17717] loop2: p2 size 327680 extends beyond EOD, truncated [ 159.271278][T17717] loop2: p4 size 2097152 extends beyond EOD, truncated [ 159.275597][T17715] loop1: p4 size 2097152 extends beyond EOD, truncated [ 159.286930][T17719] FAULT_INJECTION: forcing a failure. [ 159.286930][T17719] name failslab, interval 1, probability 0, space 0, times 0 [ 159.299564][T17719] CPU: 0 PID: 17719 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 159.308458][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.318503][T17719] Call Trace: [ 159.321919][T17719] dump_stack+0x137/0x19d 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 159.326334][T17719] should_fail+0x23c/0x250 [ 159.330749][T17719] __should_failslab+0x81/0x90 [ 159.335520][T17719] should_failslab+0x5/0x20 [ 159.340019][T17719] kmem_cache_alloc_node_trace+0x59/0x300 [ 159.344970][T17758] loop0: detected capacity change from 0 to 5 [ 159.345734][T17719] ? __kmalloc_node_track_caller+0x30/0x40 [ 159.345758][T17719] __kmalloc_node_track_caller+0x30/0x40 [ 159.345778][T17719] ? alloc_uevent_skb+0x5b/0x120 [ 159.368150][T17719] __alloc_skb+0x187/0x420 [ 159.372572][T17719] alloc_uevent_skb+0x5b/0x120 [ 159.377342][T17719] kobject_uevent_env+0x863/0xc40 [ 159.382433][T17719] kobject_uevent+0x18/0x20 [ 159.387072][T17719] add_partition+0x552/0x580 [ 159.391651][T17719] blk_add_partitions+0x583/0xa80 [ 159.396684][T17719] bdev_disk_changed+0x1a7/0x200 [ 159.401742][T17719] loop_set_status+0x75f/0x7e0 [ 159.406497][T17719] lo_ioctl+0x758/0x11f0 [ 159.410725][T17719] ? path_openat+0x19ab/0x20b0 [ 159.415498][T17719] ? putname+0xa5/0xc0 [ 159.419599][T17719] ? ___cache_free+0x3c/0x300 [ 159.424267][T17719] ? blkdev_common_ioctl+0x9c3/0x1010 [ 159.429614][T17719] ? selinux_file_ioctl+0x8e0/0x970 [ 159.434805][T17719] ? lo_release+0x120/0x120 [ 159.439397][T17719] blkdev_ioctl+0x1d0/0x3c0 [ 159.444028][T17719] block_ioctl+0x6d/0x80 [ 159.448338][T17719] ? blkdev_iopoll+0x70/0x70 [ 159.452996][T17719] __se_sys_ioctl+0xcb/0x140 [ 159.457700][T17719] __x64_sys_ioctl+0x3f/0x50 [ 159.462267][T17719] do_syscall_64+0x34/0x50 [ 159.466797][T17719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.472760][T17719] RIP: 0033:0x466217 [ 159.476823][T17719] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 159.496480][T17719] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 159.504882][T17719] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 159.512852][T17719] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 159.520818][T17719] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 159.528813][T17719] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 159.536844][T17719] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 159.545140][T17719] loop3: p4 size 2097152 extends beyond EOD, truncated [ 159.567748][T17777] loop5: detected capacity change from 0 to 9 [ 159.581884][T17715] loop1: detected capacity change from 0 to 48 [ 159.615572][T17715] loop1: p2 p4 [ 159.616085][ T1028] loop5: p2 p4 [ 159.619127][T17715] loop1: p2 size 327680 extends beyond EOD, truncated [ 159.623246][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 159.636577][T17715] loop1: p4 size 2097152 extends beyond EOD, truncated [ 159.644334][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 159.652997][T17777] loop5: p2 p4 [ 159.656688][T17777] loop5: p2 size 327680 extends beyond EOD, truncated 01:33:57 executing program 1: syz_read_part_table(0x6300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 3 (fault-call:0 fault-nth:96): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 159.663753][T17777] loop5: p4 size 2097152 extends beyond EOD, truncated [ 159.713510][T17777] loop5: detected capacity change from 0 to 9 [ 159.741273][T17820] loop0: detected capacity change from 0 to 5 [ 159.747504][T17819] loop2: detected capacity change from 0 to 1 [ 159.754774][T17823] loop3: detected capacity change from 0 to 1 [ 159.765357][T17777] loop5: p2 p4 [ 159.769022][T17777] loop5: p2 size 327680 extends beyond EOD, truncated [ 159.779872][T17819] loop2: p2 p4 [ 159.783363][T17819] loop2: p2 size 327680 extends beyond EOD, truncated [ 159.788150][T17777] loop5: p4 size 2097152 extends beyond EOD, truncated [ 159.791414][T17819] loop2: p4 size 2097152 extends beyond EOD, truncated [ 159.805377][ T1028] loop3: p2 p4 [ 159.808970][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:33:57 executing program 5: syz_read_part_table(0x2000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:57 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000", 0x20, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:57 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 159.816580][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 159.824874][T17823] loop3: p2 p4 [ 159.835217][T17823] loop3: p2 size 327680 extends beyond EOD, truncated [ 159.840963][T17855] loop1: detected capacity change from 0 to 49 [ 159.844731][T17823] FAULT_INJECTION: forcing a failure. [ 159.844731][T17823] name failslab, interval 1, probability 0, space 0, times 0 [ 159.860865][T17823] CPU: 1 PID: 17823 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 159.869624][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.879677][T17823] Call Trace: [ 159.882954][T17823] dump_stack+0x137/0x19d [ 159.887337][T17823] should_fail+0x23c/0x250 [ 159.891752][T17823] ? __kernfs_new_node+0x6a/0x330 [ 159.896831][T17823] __should_failslab+0x81/0x90 [ 159.901598][T17823] should_failslab+0x5/0x20 [ 159.906119][T17823] kmem_cache_alloc+0x46/0x300 [ 159.910879][T17823] __kernfs_new_node+0x6a/0x330 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 159.914553][T17864] loop2: detected capacity change from 0 to 1 [ 159.915718][T17823] ? __cond_resched+0x11/0x40 [ 159.915740][T17823] ? mutex_lock+0x9/0x30 [ 159.915756][T17823] kernfs_new_node+0x5b/0xd0 [ 159.915841][T17823] __kernfs_create_file+0x45/0x1a0 [ 159.922769][T17867] loop0: detected capacity change from 0 to 5 [ 159.926476][T17823] sysfs_add_file_mode_ns+0x1c1/0x250 [ 159.926501][T17823] sysfs_merge_group+0xb5/0x190 [ 159.956883][T17823] dpm_sysfs_add+0x9d/0x1d0 [ 159.961402][T17823] device_add+0x925/0xe50 [ 159.965723][T17823] add_partition+0x35b/0x580 [ 159.970306][T17823] blk_add_partitions+0x583/0xa80 [ 159.975396][T17823] bdev_disk_changed+0x1a7/0x200 [ 159.980413][T17823] loop_set_status+0x75f/0x7e0 [ 159.985200][T17823] lo_ioctl+0x758/0x11f0 [ 159.989427][T17823] ? path_openat+0x19ab/0x20b0 [ 159.994169][T17823] ? putname+0xa5/0xc0 [ 159.998235][T17823] ? ___cache_free+0x3c/0x300 [ 160.002932][T17823] ? blkdev_common_ioctl+0x9c3/0x1010 [ 160.008347][T17823] ? selinux_file_ioctl+0x8e0/0x970 [ 160.013603][T17823] ? lo_release+0x120/0x120 [ 160.018102][T17823] blkdev_ioctl+0x1d0/0x3c0 [ 160.022614][T17823] block_ioctl+0x6d/0x80 [ 160.026865][T17823] ? blkdev_iopoll+0x70/0x70 [ 160.031459][T17823] __se_sys_ioctl+0xcb/0x140 [ 160.036035][T17823] __x64_sys_ioctl+0x3f/0x50 [ 160.040629][T17823] do_syscall_64+0x34/0x50 [ 160.045047][T17823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.050979][T17823] RIP: 0033:0x466217 [ 160.054863][T17823] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 160.074453][T17823] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 160.082843][T17823] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 160.090793][T17823] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 160.098742][T17823] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 160.106768][T17823] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 160.115151][T17823] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 160.130965][T17823] loop3: p2 could not be added: 12 [ 160.136251][T17823] loop3: p4 size 2097152 extends beyond EOD, truncated [ 160.146948][T17864] loop2: p2 p4 [ 160.150542][T17855] loop1: p2 p4 [ 160.158722][T17864] loop2: p2 size 327680 extends beyond EOD, truncated [ 160.166122][T17855] loop1: p2 size 327680 extends beyond EOD, truncated [ 160.175157][T17864] loop2: p4 size 2097152 extends beyond EOD, truncated [ 160.177889][T17887] loop5: detected capacity change from 0 to 16 [ 160.187617][T17855] loop1: p4 size 2097152 extends beyond EOD, truncated [ 160.211549][ T1028] loop1: p2 p4 [ 160.217139][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 160.224626][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 160.235371][T17887] loop5: p2 p4 [ 160.239432][T17887] loop5: p2 size 327680 extends beyond EOD, truncated [ 160.247099][T17887] loop5: p4 size 2097152 extends beyond EOD, truncated [ 160.266325][T17855] loop1: detected capacity change from 0 to 49 [ 160.287878][T17887] loop5: detected capacity change from 0 to 16 [ 160.295832][T17855] loop1: p2 p4 [ 160.299514][T17855] loop1: p2 size 327680 extends beyond EOD, truncated [ 160.306973][T17855] loop1: p4 size 2097152 extends beyond EOD, truncated [ 160.307263][ T1028] loop5: p2 p4 01:33:58 executing program 1: syz_read_part_table(0x6800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 3 (fault-call:0 fault-nth:97): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 5: syz_read_part_table(0x2400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 160.317580][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 160.324795][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 160.333145][T17887] loop5: p2 p4 [ 160.336735][T17887] loop5: p2 size 327680 extends beyond EOD, truncated [ 160.344441][T17887] loop5: p4 size 2097152 extends beyond EOD, truncated 01:33:58 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:33:58 executing program 4: syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 160.405953][T17952] loop0: detected capacity change from 0 to 5 [ 160.412336][T17954] loop3: detected capacity change from 0 to 1 [ 160.419228][T17951] loop2: detected capacity change from 0 to 1 01:33:58 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 160.448551][ T1028] loop3: p2 p4 [ 160.452480][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 160.460390][T17951] loop2: p2 p4 [ 160.463936][T17951] loop2: p2 size 327680 extends beyond EOD, truncated [ 160.472516][T17971] loop1: detected capacity change from 0 to 52 [ 160.474469][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 160.486025][T17972] loop5: detected capacity change from 0 to 18 [ 160.494268][T17951] loop2: p4 size 2097152 extends beyond EOD, truncated [ 160.501149][T17954] loop3: p2 p4 [ 160.508894][T17954] loop3: p2 size 327680 extends beyond EOD, truncated [ 160.523112][T17954] FAULT_INJECTION: forcing a failure. [ 160.523112][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 160.525279][T17971] loop1: p2 p4 [ 160.535869][T17954] CPU: 0 PID: 17954 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 160.548036][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.550075][T17971] loop1: p2 size 327680 extends beyond EOD, [ 160.558094][T17954] Call Trace: [ 160.558103][T17954] dump_stack+0x137/0x19d [ 160.564075][T17971] truncated [ 160.564408][T17971] loop1: p4 size 2097152 extends beyond EOD, [ 160.567378][T17954] should_fail+0x23c/0x250 [ 160.567398][T17954] ? __kernfs_new_node+0x6a/0x330 [ 160.571713][T17971] truncated [ 160.593364][T17954] __should_failslab+0x81/0x90 [ 160.598427][T17954] should_failslab+0x5/0x20 [ 160.602919][T17954] kmem_cache_alloc+0x46/0x300 [ 160.607732][T17954] __kernfs_new_node+0x6a/0x330 [ 160.612567][T17954] ? __cond_resched+0x11/0x40 [ 160.617222][T17954] ? mutex_lock+0x9/0x30 [ 160.621445][T17954] kernfs_new_node+0x5b/0xd0 [ 160.626013][T17954] __kernfs_create_file+0x45/0x1a0 [ 160.631137][T17954] sysfs_add_file_mode_ns+0x1c1/0x250 [ 160.636665][T17954] sysfs_merge_group+0xb5/0x190 [ 160.641643][T17954] dpm_sysfs_add+0x9d/0x1d0 [ 160.646332][T17954] device_add+0x925/0xe50 [ 160.650643][T17954] add_partition+0x35b/0x580 [ 160.655342][T17954] blk_add_partitions+0x583/0xa80 [ 160.660348][T17954] bdev_disk_changed+0x1a7/0x200 [ 160.665310][T17954] loop_set_status+0x75f/0x7e0 [ 160.670064][T17954] lo_ioctl+0x758/0x11f0 [ 160.674289][T17954] ? path_openat+0x19ab/0x20b0 [ 160.679051][T17954] ? putname+0xa5/0xc0 [ 160.683112][T17954] ? ___cache_free+0x3c/0x300 [ 160.687765][T17954] ? blkdev_common_ioctl+0x9c3/0x1010 [ 160.693218][T17954] ? selinux_file_ioctl+0x8e0/0x970 [ 160.698397][T17954] ? lo_release+0x120/0x120 [ 160.702920][T17954] blkdev_ioctl+0x1d0/0x3c0 [ 160.707415][T17954] block_ioctl+0x6d/0x80 [ 160.711636][T17954] ? blkdev_iopoll+0x70/0x70 [ 160.716239][T17954] __se_sys_ioctl+0xcb/0x140 [ 160.720936][T17954] __x64_sys_ioctl+0x3f/0x50 [ 160.725513][T17954] do_syscall_64+0x34/0x50 [ 160.729985][T17954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.735939][T17954] RIP: 0033:0x466217 01:33:58 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 160.739906][T17954] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 160.759493][T17954] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 160.767925][T17954] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 160.776481][T17954] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 160.785137][T17954] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 01:33:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 160.793178][T17954] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 160.801128][T17954] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 160.810682][T17972] loop5: p2 p4 [ 160.814315][T17972] loop5: p2 size 327680 extends beyond EOD, truncated [ 160.821900][T17999] loop0: detected capacity change from 0 to 5 [ 160.824026][T17954] loop3: p2 could not be added: 12 [ 160.833331][T17954] loop3: p4 size 2097152 extends beyond EOD, truncated [ 160.847923][T17972] loop5: p4 size 2097152 extends beyond EOD, truncated [ 160.854867][T17971] loop1: detected capacity change from 0 to 52 [ 160.882508][T18023] loop2: detected capacity change from 0 to 1 [ 160.889138][T17971] loop1: p2 p4 [ 160.892664][T17971] loop1: p2 size 327680 extends beyond EOD, truncated 01:33:58 executing program 1: syz_read_part_table(0x6c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/48, 0x30, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 3 (fault-call:0 fault-nth:98): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 160.900981][T17971] loop1: p4 size 2097152 extends beyond EOD, truncated [ 160.915571][T18023] loop2: p2 p4 [ 160.919086][T18023] loop2: p2 size 327680 extends beyond EOD, truncated [ 160.927331][T18023] loop2: p4 size 2097152 extends beyond EOD, truncated [ 160.927752][T17972] loop5: detected capacity change from 0 to 18 [ 160.941265][ T1028] loop1: p2 p4 01:33:58 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 160.944857][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 160.953179][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 160.979319][T18057] loop0: detected capacity change from 0 to 5 [ 160.986218][T18056] loop3: detected capacity change from 0 to 1 [ 160.995485][T17972] loop5: p2 p4 [ 160.999137][T17972] loop5: p2 size 327680 extends beyond EOD, truncated [ 161.008643][T17972] loop5: p4 size 2097152 extends beyond EOD, truncated [ 161.025302][T18056] loop3: p2 p4 [ 161.025784][T18068] loop4: detected capacity change from 0 to 1 [ 161.028988][T18056] loop3: p2 size 327680 extends beyond EOD, truncated [ 161.042435][T18056] loop3: p4 size 2097152 extends beyond EOD, truncated 01:33:58 executing program 5: syz_read_part_table(0x2500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:58 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 161.049417][T18056] FAULT_INJECTION: forcing a failure. [ 161.049417][T18056] name failslab, interval 1, probability 0, space 0, times 0 [ 161.062052][T18056] CPU: 1 PID: 18056 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 161.067280][ T1028] loop5: p2 p4 [ 161.070818][T18056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.070830][T18056] Call Trace: [ 161.070837][T18056] dump_stack+0x137/0x19d [ 161.079031][ T1028] loop5: p2 size 327680 extends beyond EOD, [ 161.084313][T18056] should_fail+0x23c/0x250 [ 161.087602][ T1028] truncated [ 161.091909][T18056] ? bdev_alloc_inode+0x23/0x70 [ 161.099776][ T1028] loop5: p4 size 2097152 extends beyond EOD, [ 161.102264][T18056] __should_failslab+0x81/0x90 [ 161.105382][ T1028] truncated [ 161.110188][T18056] ? bd_init_fs_context+0x80/0x80 [ 161.129077][T18056] should_failslab+0x5/0x20 [ 161.132849][T18088] loop1: detected capacity change from 0 to 54 [ 161.133762][T18056] kmem_cache_alloc+0x46/0x300 [ 161.133785][T18056] ? tick_nohz_tick_stopped+0x2e/0x40 [ 161.150103][T18056] ? bd_init_fs_context+0x80/0x80 [ 161.153339][T18094] loop2: detected capacity change from 0 to 1 [ 161.155139][T18056] bdev_alloc_inode+0x23/0x70 [ 161.155163][T18056] ? bd_init_fs_context+0x80/0x80 [ 161.155181][T18056] new_inode_pseudo+0x38/0x1c0 [ 161.162438][T18093] loop0: detected capacity change from 0 to 5 [ 161.166884][T18056] new_inode+0x21/0x120 [ 161.186847][T18056] bdev_alloc+0x27/0x160 [ 161.191068][T18056] add_partition+0x155/0x580 [ 161.195698][T18056] blk_add_partitions+0x583/0xa80 [ 161.200706][T18056] bdev_disk_changed+0x1a7/0x200 [ 161.205627][T18056] loop_set_status+0x75f/0x7e0 [ 161.210389][T18056] lo_ioctl+0x758/0x11f0 [ 161.214628][T18056] ? path_openat+0x19ab/0x20b0 [ 161.219455][T18056] ? putname+0xa5/0xc0 [ 161.223504][T18056] ? ___cache_free+0x3c/0x300 [ 161.228158][T18056] ? blkdev_common_ioctl+0x9c3/0x1010 [ 161.233518][T18056] ? selinux_file_ioctl+0x8e0/0x970 [ 161.238869][T18056] ? lo_release+0x120/0x120 [ 161.243361][T18056] blkdev_ioctl+0x1d0/0x3c0 [ 161.247856][T18056] block_ioctl+0x6d/0x80 [ 161.252077][T18056] ? blkdev_iopoll+0x70/0x70 [ 161.256664][T18056] __se_sys_ioctl+0xcb/0x140 [ 161.261263][T18056] __x64_sys_ioctl+0x3f/0x50 [ 161.265846][T18056] do_syscall_64+0x34/0x50 [ 161.270244][T18056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 161.276200][T18056] RIP: 0033:0x466217 [ 161.280094][T18056] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 161.299694][T18056] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 161.308101][T18056] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 161.316081][T18056] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 161.324104][T18056] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 161.332059][T18056] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 161.340023][T18056] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 161.348104][T18056] loop3: p4 could not be added: 12 [ 161.365238][T18068] loop4: p2 p4 [ 161.368915][T18068] loop4: p2 size 327680 extends beyond EOD, truncated [ 161.376334][T18068] loop4: p4 size 2097152 extends beyond EOD, truncated [ 161.385989][T18088] loop1: p2 p4 [ 161.389506][T18088] loop1: p2 size 327680 extends beyond EOD, truncated [ 161.396458][T18094] loop2: p2 p4 01:33:59 executing program 3 (fault-call:0 fault-nth:99): syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:59 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:59 executing program 4: syz_read_part_table(0x1300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 161.399951][T18094] loop2: p2 size 327680 extends beyond EOD, truncated [ 161.402583][T18088] loop1: p4 size 2097152 extends beyond EOD, truncated [ 161.413913][T18094] loop2: p4 size 2097152 extends beyond EOD, truncated [ 161.426434][T13803] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 161.438250][ T1778] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 161.487339][T18088] loop1: detected capacity change from 0 to 54 [ 161.510921][ T703] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.521839][ T703] Buffer I/O error on dev loop5p4, logical block 4, async page read [ 161.524954][T18136] loop3: detected capacity change from 0 to 1 [ 161.529879][ T703] blk_update_request: I/O error, dev loop5, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.537011][T18088] loop1: p2 p4 [ 161.546921][ T703] Buffer I/O error on dev loop5p4, logical block 5, async page read [ 161.546947][ T703] blk_update_request: I/O error, dev loop5, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.551301][T18088] loop1: p2 size 327680 extends beyond EOD, [ 161.558380][ T703] Buffer I/O error on dev loop5p4, logical block 6, async page read [ 161.558404][ T703] blk_update_request: I/O error, dev loop5, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.569341][T18088] truncated [ 161.571194][T18088] loop1: p4 size 2097152 extends beyond EOD, [ 161.575307][ T703] Buffer I/O error on dev loop5p4, logical block 7, async page read [ 161.584489][T18130] loop2: detected capacity change from 0 to 1 [ 161.594260][T18088] truncated [ 161.597418][T18138] loop0: detected capacity change from 0 to 5 [ 161.603498][T18140] loop4: detected capacity change from 0 to 9 01:33:59 executing program 1: syz_read_part_table(0x7400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 161.645369][T18136] loop3: p2 p4 [ 161.648959][T18136] loop3: p2 size 327680 extends beyond EOD, truncated [ 161.649060][ T1028] loop2: p2 p4 [ 161.657008][T18136] loop3: p4 size 2097152 extends beyond EOD, truncated [ 161.659304][T18144] loop5: detected capacity change from 0 to 18 [ 161.666116][T18136] FAULT_INJECTION: forcing a failure. [ 161.666116][T18136] name failslab, interval 1, probability 0, space 0, times 0 [ 161.682524][ T1028] loop2: p2 size 327680 extends beyond EOD, truncated [ 161.684935][T18136] CPU: 1 PID: 18136 Comm: syz-executor.3 Not tainted 5.12.0-rc8-syzkaller #0 [ 161.699254][T18140] loop4: p2 p4 [ 161.700390][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.703987][T18140] loop4: p2 size 327680 extends beyond EOD, [ 161.713930][T18136] Call Trace: [ 161.713940][T18136] dump_stack+0x137/0x19d [ 161.713962][T18136] should_fail+0x23c/0x250 [ 161.713976][T18136] ? security_inode_alloc+0x30/0x180 [ 161.720035][T18140] truncated [ 161.723366][T18136] __should_failslab+0x81/0x90 [ 161.729557][ T1028] loop2: p4 size 2097152 extends beyond EOD, [ 161.732063][T18136] should_failslab+0x5/0x20 [ 161.732092][T18136] kmem_cache_alloc+0x46/0x300 [ 161.737365][ T1028] truncated [ 161.740444][T18136] security_inode_alloc+0x30/0x180 [ 161.748201][T18130] loop2: p2 p4 [ 161.751305][T18136] inode_init_always+0x20b/0x420 [ 161.756914][T18130] loop2: p2 size 327680 extends beyond EOD, [ 161.760902][T18136] ? bd_init_fs_context+0x80/0x80 [ 161.760926][T18136] new_inode_pseudo+0x73/0x1c0 [ 161.764015][T18130] truncated [ 161.764857][T18130] loop2: p4 size 2097152 extends beyond EOD, [ 161.769101][T18136] new_inode+0x21/0x120 [ 161.769144][T18136] bdev_alloc+0x27/0x160 [ 161.772602][T18130] truncated [ 161.774558][T18140] loop4: p4 size 2097152 extends beyond EOD, [ 161.777514][T18136] add_partition+0x155/0x580 [ 161.777538][T18136] blk_add_partitions+0x583/0xa80 [ 161.777559][T18136] bdev_disk_changed+0x1a7/0x200 [ 161.783594][T18140] truncated [ 161.837708][T18136] loop_set_status+0x75f/0x7e0 [ 161.842461][T18136] lo_ioctl+0x758/0x11f0 [ 161.846682][T18136] ? path_openat+0x19ab/0x20b0 [ 161.851429][T18136] ? putname+0xa5/0xc0 [ 161.855476][T18136] ? ___cache_free+0x3c/0x300 [ 161.860143][T18136] ? blkdev_common_ioctl+0x9c3/0x1010 [ 161.865586][T18136] ? selinux_file_ioctl+0x8e0/0x970 [ 161.870763][T18136] ? lo_release+0x120/0x120 [ 161.875267][T18136] blkdev_ioctl+0x1d0/0x3c0 [ 161.879749][T18136] block_ioctl+0x6d/0x80 [ 161.883972][T18136] ? blkdev_iopoll+0x70/0x70 [ 161.888545][T18136] __se_sys_ioctl+0xcb/0x140 [ 161.893218][T18136] __x64_sys_ioctl+0x3f/0x50 [ 161.897810][T18136] do_syscall_64+0x34/0x50 [ 161.902206][T18136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 161.908157][T18136] RIP: 0033:0x466217 [ 161.912041][T18136] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 161.931984][T18136] RSP: 002b:00007f45d2453ef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 01:33:59 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/56, 0x38, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 161.940378][T18136] RAX: ffffffffffffffda RBX: 00007f45d2453f40 RCX: 0000000000466217 [ 161.948328][T18136] RDX: 00007f45d2454050 RSI: 0000000000004c04 RDI: 0000000000000005 [ 161.956337][T18136] RBP: 00007f45d24541d0 R08: 0000000000000000 R09: 0000000000000000 [ 161.964294][T18136] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f45d2454050 [ 161.972349][T18136] R13: 00007ffe09c55baf R14: 00007f45d2454300 R15: 0000000000022000 [ 161.980373][T18136] loop3: p4 could not be added: 12 01:33:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:33:59 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_uring_enter(r0, 0x423b, 0xe555, 0x1, &(0x7f0000000200)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x6) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'os2.', '*\xab!++\\$(]\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x0) 01:33:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.030915][T18144] loop5: p2 p4 [ 162.034505][T18144] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.060977][T18144] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.090412][T18192] loop1: detected capacity change from 0 to 58 [ 162.096895][T18196] loop0: detected capacity change from 0 to 5 [ 162.103146][T18199] loop3: detected capacity change from 0 to 1 [ 162.122615][T18214] loop2: detected capacity change from 0 to 1 [ 162.122619][T18144] loop5: detected capacity change from 0 to 18 [ 162.135324][T18192] loop1: p2 p4 [ 162.135617][T18199] loop3: p2 p4 [ 162.138892][T18192] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.142355][T18199] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.149392][ T1028] loop5: p2 p4 [ 162.159489][T18199] loop3: p4 size 2097152 extends beyond EOD, truncated [ 162.159807][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.166500][T18214] loop2: p2 p4 [ 162.176257][T18192] loop1: p4 size 2097152 extends beyond EOD, truncated [ 162.177252][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:00 executing program 5: syz_read_part_table(0x2698, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_uring_enter(r0, 0x423b, 0xe555, 0x1, &(0x7f0000000200)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x6) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'os2.', '*\xab!++\\$(]\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x0) 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 3: syz_read_part_table(0x2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.191695][T18214] loop2: p2 size 327680 extends beyond EOD, truncated [ 162.199838][T18144] loop5: p2 p4 [ 162.203520][T18144] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.211683][T18144] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.214961][T18214] loop2: p4 size 2097152 extends beyond EOD, truncated [ 162.225697][T18192] loop1: detected capacity change from 0 to 58 01:34:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_uring_enter(r0, 0x423b, 0xe555, 0x1, &(0x7f0000000200)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x6) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'os2.', '*\xab!++\\$(]\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x0) [ 162.253357][ T1028] loop5: p2 p4 [ 162.257857][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.272062][T18192] loop1: p2 p4 [ 162.276396][T18192] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.283909][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.288370][T18192] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_uring_enter(r0, 0x423b, 0xe555, 0x1, &(0x7f0000000200)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x6) 01:34:00 executing program 1: syz_read_part_table(0x7a00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.305223][T18259] loop0: detected capacity change from 0 to 5 [ 162.316041][T18267] loop3: detected capacity change from 0 to 1 [ 162.334134][T18277] loop2: detected capacity change from 0 to 1 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.357309][T18273] loop5: detected capacity change from 0 to 19 [ 162.365472][T18267] loop3: p2 p4 [ 162.369014][T18267] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.376858][T18277] loop2: p2 p4 [ 162.380386][T18277] loop2: p2 size 327680 extends beyond EOD, truncated [ 162.387834][T18273] loop5: p2 p4 [ 162.391409][T18273] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x423b, 0xe555, 0x1, &(0x7f0000000200)={[0x1]}, 0x8) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) [ 162.403164][T18267] loop3: p4 size 2097152 extends beyond EOD, truncated [ 162.419025][T18273] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.427645][T18277] loop2: p4 size 2097152 extends beyond EOD, truncated [ 162.434598][T18301] loop0: detected capacity change from 0 to 5 01:34:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.482922][T18315] loop1: detected capacity change from 0 to 61 [ 162.489510][T18273] loop5: detected capacity change from 0 to 19 [ 162.495837][T18267] loop3: detected capacity change from 0 to 1 [ 162.545327][T18267] loop3: p2 p4 [ 162.548867][T18267] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.548944][T18345] loop2: detected capacity change from 0 to 1 [ 162.556872][T18267] loop3: p4 size 2097152 extends beyond EOD, truncated [ 162.565751][T18315] loop1: p2 p4 [ 162.569047][T18273] loop5: p2 p4 [ 162.572083][T18315] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.576545][T18273] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:00 executing program 5: syz_read_part_table(0x3f00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.583481][T18315] loop1: p4 size 2097152 extends beyond EOD, truncated [ 162.590609][T18273] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.596370][T18345] loop2: p2 p4 [ 162.606397][T18345] loop2: p2 size 327680 extends beyond EOD, truncated [ 162.613715][T18345] loop2: p4 size 2097152 extends beyond EOD, truncated [ 162.613946][ T1028] loop3: p2 p4 [ 162.625058][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.632322][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:00 executing program 3: syz_read_part_table(0x3, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 162.646930][T18315] loop1: detected capacity change from 0 to 61 [ 162.671529][T18377] loop0: detected capacity change from 0 to 5 [ 162.686542][T18315] loop1: p2 p4 01:34:00 executing program 1: syz_read_part_table(0x8004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 162.697341][T18315] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.708478][T18315] loop1: p4 size 2097152 extends beyond EOD, truncated [ 162.719457][ T1028] loop1: p2 p4 [ 162.723180][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.730571][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 162.731122][T18393] loop5: detected capacity change from 0 to 31 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 162.748303][T18398] loop2: detected capacity change from 0 to 1 [ 162.779617][T18419] loop0: detected capacity change from 0 to 5 [ 162.779617][T18415] loop3: detected capacity change from 0 to 1 [ 162.795281][T18393] loop5: p2 p4 [ 162.799983][T18393] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.807448][T18398] loop2: p2 p4 [ 162.811154][T18398] loop2: p2 size 327680 extends beyond EOD, truncated [ 162.812690][T18393] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.824337][T18398] loop2: p4 size 2097152 extends beyond EOD, truncated [ 162.845290][T18415] loop3: p2 p4 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 162.848844][T18415] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.863013][T18415] loop3: p4 size 2097152 extends beyond EOD, truncated [ 162.875471][T18393] loop5: detected capacity change from 0 to 31 [ 162.879502][T18441] loop1: detected capacity change from 0 to 64 [ 162.890217][ T1028] loop3: p2 p4 [ 162.897545][T18393] loop5: p2 p4 [ 162.901080][T18393] loop5: p2 size 327680 extends beyond EOD, truncated [ 162.909836][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 162.924741][T18441] loop1: p2 p4 [ 162.928704][T18441] loop1: p2 size 327680 extends beyond EOD, truncated [ 162.931494][T18393] loop5: p4 size 2097152 extends beyond EOD, truncated [ 162.943305][T18468] loop0: detected capacity change from 0 to 5 01:34:00 executing program 5: syz_read_part_table(0x4000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 162.943340][T18441] loop1: p4 size 2097152 extends beyond EOD, truncated [ 162.953907][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 162.984314][T18415] loop3: detected capacity change from 0 to 1 [ 162.986324][T18441] loop1: detected capacity change from 0 to 64 [ 163.026703][T18491] loop2: detected capacity change from 0 to 1 [ 163.035833][T18441] loop1: p2 p4 [ 163.039427][T18415] loop3: p2 p4 [ 163.040859][T18441] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.046406][T18415] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.050050][T18441] loop1: p4 size 2097152 extends beyond EOD, truncated [ 163.058133][T18415] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.071975][ T1028] loop3: p2 p4 [ 163.075598][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.082837][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.090439][T18491] loop2: p2 p4 [ 163.093944][T18491] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.103319][T18515] loop5: detected capacity change from 0 to 32 [ 163.115105][T18491] loop2: p4 size 2097152 extends beyond EOD, truncated 01:34:00 executing program 3: syz_read_part_table(0x4, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:00 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa600000000000000000005000000000042000000000000000000000000000000000000000000000000002000", 0x3e, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 1: syz_read_part_table(0x9000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 163.145242][T18515] loop5: p2 p4 [ 163.149698][T18515] loop5: p2 size 327680 extends beyond EOD, truncated [ 163.156902][T18515] loop5: p4 size 2097152 extends beyond EOD, truncated [ 163.174429][ T1028] loop3: p2 p4 [ 163.182088][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:00 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.194539][T18540] loop1: detected capacity change from 0 to 72 [ 163.198831][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.216397][T18515] loop5: detected capacity change from 0 to 32 [ 163.222945][T18550] loop0: detected capacity change from 0 to 5 [ 163.235663][T18556] loop2: detected capacity change from 0 to 1 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.245279][T18540] loop1: p2 p4 [ 163.249029][T18540] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.256838][T18515] loop5: p2 p4 [ 163.265850][T18556] loop2: p2 p4 [ 163.272228][T18515] loop5: p2 size 327680 extends beyond EOD, truncated [ 163.275066][T18556] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.281731][T18515] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 5: syz_read_part_table(0x4800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ffffffc, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.297182][T18558] loop3: detected capacity change from 0 to 1 [ 163.308349][T18540] loop1: p4 size 2097152 extends beyond EOD, truncated [ 163.316252][T18558] loop3: p2 p4 [ 163.319834][T18558] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.328019][T18556] loop2: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 163.351940][T18588] loop0: detected capacity change from 0 to 5 [ 163.352236][T18558] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.381051][ T1028] loop3: p2 p4 [ 163.384596][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.392724][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.431107][T18540] loop1: detected capacity change from 0 to 72 [ 163.447002][T18558] loop3: detected capacity change from 0 to 1 [ 163.462490][T18626] loop5: detected capacity change from 0 to 36 [ 163.466079][T18627] loop2: detected capacity change from 0 to 1 [ 163.475634][ T1028] loop1: p2 p4 01:34:01 executing program 3: syz_read_part_table(0x5, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 163.479169][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.486378][T18558] loop3: p2 p4 [ 163.486516][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 163.490000][T18558] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.505410][T18558] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.505620][T18540] loop1: p2 p4 [ 163.515871][T18540] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.523170][T18540] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 1: syz_read_part_table(0x9d26, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.530547][T18626] loop5: p2 p4 [ 163.534037][T18626] loop5: p2 size 327680 extends beyond EOD, truncated [ 163.541452][T18627] loop2: p2 p4 [ 163.549632][T18627] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.563251][T18626] loop5: p4 size 2097152 extends beyond EOD, truncated [ 163.565144][T18627] loop2: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055", 0x3f, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) [ 163.579598][T18654] loop0: detected capacity change from 0 to 5 [ 163.601134][T18666] loop3: detected capacity change from 0 to 1 [ 163.621335][T18666] loop3: p2 p4 [ 163.626515][T18666] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.641295][T18626] loop5: detected capacity change from 0 to 36 [ 163.649039][T18666] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.652410][T18683] loop1: detected capacity change from 0 to 78 [ 163.675321][T18683] loop1: p2 p4 [ 163.678932][T18683] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.686612][ T1028] loop5: p2 p4 [ 163.690389][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 163.690481][T18683] loop1: p4 size 2097152 extends beyond EOD, truncated [ 163.705073][T18693] loop2: detected capacity change from 0 to 1 [ 163.713572][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 163.720847][T18666] loop3: detected capacity change from 0 to 1 [ 163.721790][T18709] loop0: detected capacity change from 0 to 5 [ 163.734426][T18626] loop5: p2 p4 [ 163.738598][T18693] loop2: p2 p4 [ 163.740898][T18626] loop5: p2 size 327680 extends beyond EOD, truncated [ 163.742452][T18693] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.749655][T18683] loop1: detected capacity change from 0 to 78 [ 163.756849][T18693] loop2: p4 size 2097152 extends beyond EOD, truncated [ 163.765284][T18666] loop3: p2 p4 [ 163.770515][T18626] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 5: syz_read_part_table(0x4c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 1: syz_read_part_table(0xed0b, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 3: syz_read_part_table(0x6, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 163.772680][T18666] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.787238][T18666] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.795157][T18683] loop1: p2 p4 [ 163.798700][T18683] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.806396][T18683] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.840070][ T1028] loop3: p2 p4 [ 163.859474][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 163.876664][T18748] loop0: detected capacity change from 0 to 5 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x388}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 163.884897][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 163.907930][T18761] loop2: detected capacity change from 0 to 1 [ 163.908215][T18765] loop1: detected capacity change from 0 to 118 [ 163.920849][T18753] loop5: detected capacity change from 0 to 38 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 163.945208][T18761] loop2: p2 p4 [ 163.948945][T18761] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.957309][T18761] loop2: p4 size 2097152 extends beyond EOD, truncated [ 163.966067][T18753] loop5: p2 p4 [ 163.966076][T18772] loop3: detected capacity change from 0 to 1 [ 163.969768][ T1028] loop1: p2 p4 [ 163.980174][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 163.984366][T18753] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) [ 163.989739][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.002744][T18753] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.011681][T18765] loop1: p2 p4 [ 164.015689][T18765] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.031327][T18765] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.040360][T18772] loop3: p2 p4 [ 164.044458][T18772] loop3: p2 size 327680 extends beyond EOD, truncated [ 164.051624][T18808] loop0: detected capacity change from 0 to 5 [ 164.069955][T18753] loop5: detected capacity change from 0 to 38 [ 164.076382][T18772] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:01 executing program 5: syz_read_part_table(0x5400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:01 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:01 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 164.106490][T18753] loop5: p2 p4 [ 164.108325][T18772] loop3: detected capacity change from 0 to 1 [ 164.110008][T18753] loop5: p2 size 327680 extends beyond EOD, truncated [ 164.118785][T18823] loop2: detected capacity change from 0 to 1 [ 164.129083][T18765] loop1: detected capacity change from 0 to 118 [ 164.130279][T18753] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.165138][T18772] loop3: p2 p4 [ 164.168782][T18772] loop3: p2 size 327680 extends beyond EOD, truncated [ 164.176100][T18823] loop2: p2 p4 [ 164.179600][T18823] loop2: p2 size 327680 extends beyond EOD, truncated [ 164.186593][T18772] loop3: p4 size 2097152 extends beyond EOD, truncated [ 164.187647][T18765] loop1: p2 p4 01:34:02 executing program 1: syz_read_part_table(0xee0b, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:02 executing program 3: syz_read_part_table(0x7, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.211657][T18765] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.213214][T18859] loop0: detected capacity change from 0 to 5 [ 164.222013][T18823] loop2: p4 size 2097152 extends beyond EOD, truncated [ 164.227645][T18765] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.239746][ T1028] loop1: p2 p4 [ 164.243269][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.254315][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:02 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.270754][T18880] loop5: detected capacity change from 0 to 42 [ 164.283045][T18885] loop2: detected capacity change from 0 to 1 [ 164.315852][T18880] loop5: p2 p4 [ 164.319537][T18880] loop5: p2 size 327680 extends beyond EOD, truncated [ 164.327054][T18885] loop2: p2 p4 [ 164.330604][T18885] loop2: p2 size 327680 extends beyond EOD, truncated [ 164.353538][T18912] loop3: detected capacity change from 0 to 1 [ 164.353696][T18913] loop1: detected capacity change from 0 to 119 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.361216][T18880] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.366547][T18916] loop0: detected capacity change from 0 to 5 [ 164.373813][T18885] loop2: p4 size 2097152 extends beyond EOD, truncated [ 164.405226][T18916] loop0: p2 p4 [ 164.408993][T18916] loop0: p2 size 327680 extends beyond EOD, truncated [ 164.416870][T18916] loop0: p4 size 2097152 extends beyond EOD, truncated [ 164.428555][T18913] loop1: p2 p4 [ 164.433044][T18912] loop3: p2 p4 [ 164.433066][T18880] loop5: detected capacity change from 0 to 42 [ 164.433116][T18912] loop3: p2 size 327680 extends beyond EOD, truncated [ 164.443831][T18913] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.456967][T18912] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:02 executing program 5: syz_read_part_table(0x5500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 01:34:02 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 164.459870][T18913] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.475238][T18880] loop5: p2 p4 [ 164.478896][T18880] loop5: p2 size 327680 extends beyond EOD, truncated [ 164.486181][T18880] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.496280][ T1028] loop3: p2 p4 [ 164.499891][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 164.507868][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 164.552704][T18913] loop1: detected capacity change from 0 to 119 [ 164.562909][T18912] loop3: detected capacity change from 0 to 1 [ 164.565293][T18979] loop2: detected capacity change from 0 to 1 [ 164.575556][T18978] loop0: detected capacity change from 0 to 5 01:34:02 executing program 1: syz_read_part_table(0xf504, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:02 executing program 3: syz_read_part_table(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 164.605246][T18913] loop1: p2 p4 [ 164.608820][T18913] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.616932][T18913] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.624615][T18978] loop0: p2 p4 [ 164.628189][T18979] loop2: p2 p4 [ 164.631720][T18979] loop2: p2 size 327680 extends beyond EOD, truncated [ 164.636874][T18993] loop5: detected capacity change from 0 to 42 [ 164.645615][T18978] loop0: p2 size 327680 extends beyond EOD, truncated 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:02 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.653040][T18979] loop2: p4 size 2097152 extends beyond EOD, truncated [ 164.653238][T18978] loop0: p4 size 2097152 extends beyond EOD, truncated [ 164.667847][ T1028] loop0: p2 p4 [ 164.671406][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 164.680229][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 164.685279][T18993] loop5: p2 p4 [ 164.694646][T18993] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.722492][T18993] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.743792][T19027] loop1: detected capacity change from 0 to 122 [ 164.750523][T19040] loop3: detected capacity change from 0 to 1 [ 164.751338][T19038] loop0: detected capacity change from 0 to 5 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.785230][T19027] loop1: p2 p4 [ 164.788874][T19027] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.796894][T19027] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.805738][T19040] loop3: p2 p4 [ 164.809250][ T1028] loop0: p2 p4 [ 164.811845][T19040] loop3: p2 size 327680 extends beyond EOD, truncated [ 164.812751][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 164.820964][T19037] loop2: detected capacity change from 0 to 1 [ 164.829757][T19040] loop3: p4 size 2097152 extends beyond EOD, truncated [ 164.833429][T18993] loop5: detected capacity change from 0 to 42 [ 164.846216][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 164.855342][T19038] loop0: p2 p4 [ 164.859106][T19038] loop0: p2 size 327680 extends beyond EOD, truncated [ 164.869527][T19038] loop0: p4 size 2097152 extends beyond EOD, truncated [ 164.873390][T19027] loop1: detected capacity change from 0 to 122 01:34:02 executing program 5: syz_read_part_table(0x6000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 164.876613][T18993] loop5: p2 p4 [ 164.886426][T19037] loop2: p2 p4 [ 164.890284][T19037] loop2: p2 size 327680 extends beyond EOD, truncated [ 164.894645][T18993] loop5: p2 size 327680 extends beyond EOD, truncated [ 164.898110][T19037] loop2: p4 size 2097152 extends beyond EOD, truncated [ 164.905508][T18993] loop5: p4 size 2097152 extends beyond EOD, truncated [ 164.925614][T19027] loop1: p2 p4 [ 164.929150][T19040] loop3: detected capacity change from 0 to 1 01:34:02 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 1: syz_read_part_table(0xff0f, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 164.929379][T19027] loop1: p2 size 327680 extends beyond EOD, truncated [ 164.942838][T19027] loop1: p4 size 2097152 extends beyond EOD, truncated [ 164.969199][ T1028] loop3: p2 p4 [ 164.972860][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:02 executing program 2: syz_read_part_table(0x2500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 164.987778][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.002948][T19116] loop0: detected capacity change from 0 to 5 [ 165.013010][T19040] loop3: p2 p4 [ 165.017561][T19040] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.028781][T19040] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:02 executing program 3: syz_read_part_table(0x9, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.033266][T19127] loop5: detected capacity change from 0 to 48 [ 165.042155][T19116] loop0: p2 p4 [ 165.045742][T19116] loop0: p2 size 327680 extends beyond EOD, truncated [ 165.052835][T19131] loop2: detected capacity change from 0 to 18 [ 165.053121][T19139] loop1: detected capacity change from 0 to 127 [ 165.060039][T19116] loop0: p4 size 2097152 extends beyond EOD, truncated [ 165.105075][T19127] loop5: p2 p4 [ 165.105264][T19131] loop2: p2 p4 [ 165.108703][T19127] loop5: p2 size 327680 extends beyond EOD, truncated [ 165.112239][T19139] loop1: p2 p4 [ 165.120429][T19127] loop5: p4 size 2097152 extends beyond EOD, truncated [ 165.122746][T19131] loop2: p2 size 327680 extends beyond EOD, truncated [ 165.140586][T19139] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:02 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:02 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.152382][T19139] loop1: p4 size 2097152 extends beyond EOD, truncated [ 165.156268][T19131] loop2: p4 size 2097152 extends beyond EOD, truncated [ 165.177765][T19173] loop3: detected capacity change from 0 to 1 [ 165.205720][T19139] loop1: detected capacity change from 0 to 127 [ 165.212131][T19127] loop5: detected capacity change from 0 to 48 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="bbda80ec54f5ed070d7096c35d1c62", 0xf}, {&(0x7f00000002c0)="40e4f7367308b8837713e7b4c267ee027b0e783bc2ce047df69579fb5df659c1405110852ad4b07730df8785c36ad26ba34021faa464642454d9d8d040470f0eb76b993c3d5208ddfc277c935ef7082ac13ff48d65dd99960b345b44754350ad96e62815ad4b5d52feca0965dde94667a066637b82361b8b055aebf439dc8ede74a2c6d9a65ca9418b", 0x89}, {&(0x7f0000000380)="c9f8f4fd847d3d4bc42794c3fb9d1467a098de957d66459025a137688efcd89d79e5a3dbd28632ed1923e24eb9917e6998a82cf40cfa90ec9b45b646286396ab1f265fa197eb163fd77fd9c98b4c5a1fbf0a98ee621739928af1484bf1a892f1798c2fc611b3ee855bad78004c314e61920ee393bd17c1d714e6b0f03cfea747249c94e968f08e3ee932416fd0380736044aeb20bf07ea9813829f1c5db8db887a4e5d6e71d17f604ade0be0efe0a06f45a354a234f075076a8ecb6c5dba0e49651aa6f56873e6dac9232e8821a0443559d8c72c982756d7128d8f0a7546790387fc9e", 0xe3}, {&(0x7f0000000480)="2223bea75f9c62d5403449bf5ac6fbf6ee6cc10672a08a06d4d6205449e6ef48940b82992913ce464f890114ce4197c2337497a6cb76c82e3da39c16f912c65ad01f1f6e494e3e4d5426f3f7f7750ce2822bbb72918e7ada1f33b5093d8642632f9684a046a02ef987ac040775bde766aa7822d8fa2c3bc1ad4dc62fe2106dfe84b7b69d9114f6e2ab53ee8474775c6910fc506636404dc76f4e47d84b", 0x9d}, {&(0x7f00000008c0)="9b9cd908e3fcdaee8ce1cad722e4132abe75d0f39c40e70faf67b80b16905dd015a38c78f5cacc1d4a784eff50c4556c2e899bd1ffd8eca100607e007dd48f88e5620f77ff612fbad770fc6ea3e6da5fa959e281a7a69b0954079d48da423a116319a6170a859fef41d7fae0bddf2e42224cf76e1e8f7be95b049e1b2bfd071cf093d1262ac77963d7141d306300518884d25d8a77253a4bd9ad800a3f8f818c4f9851303cd7aa2373b2e7edc390f9ee707e6a7dc1471948b23210395f97dc6f5e0461d7fd97e966ce590f44e7b22809", 0xd0}, {&(0x7f0000000640)="2de2d252e0dc51a4f904f93a24b16ea0b79cf5c94f284de6a4c56077b28faa58ee052010ce7f2439915f47fd8f56291f32b4efd1cb3108f774cd585a96bd36e2904f0c5f719aab072979b9d0296995f4aabd288d412f6f7151f979a89762a094d4c4e6735e0ec4057dc6617844f18937134e4b093a02936e62943bec5160fa48bf683b5fd701fc0d91580cd7689e928b23f077dea33f595188689a4a24a9769b4533673e7a77bc25574f2fb0aea26c2a034f0e701c59a1a7f2be5fee7c245b219c93878288ac3d2fc425cb7337624df68c1398c67f8033864736d8b7d8636226e03ab21d2327faaf85caf52d1b112e25c91a23", 0xf3}, {&(0x7f0000000740)="fbf26a005a8dcbdc200bd477889ebd3cefae582ad7fabd14bf6e1d40b019a269de66733b9cbb6d9949156c2d642406f3c464dfb78bbb47d1ae19a23c446d65f5731c30076c2a7fbb119bb1c02fc9f1ffe61135fb0fbb892d41d629307d05e71d9fb37ce760207aa28c6deed6f8e93a8ff59e546266782d4f193d26e9ba", 0x7d}], 0x7, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}], 0x18}, 0x40c0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000040)=0x80, &(0x7f0000000140)=@ax25={{}, [@bcast, @remote, @bcast, @default, @remote, @null, @rose]}, 0x0, 0x0, 0x1}, 0x800) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.258465][T19173] loop3: p2 p4 [ 165.260712][T19197] loop0: detected capacity change from 0 to 5 [ 165.262000][T19173] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.275811][T19139] loop1: p2 p4 [ 165.279361][T19127] loop5: p2 p4 [ 165.283695][T19127] loop5: p2 size 327680 extends beyond EOD, truncated [ 165.290860][T19173] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.296220][T19139] loop1: p2 size 327680 extends beyond EOD, truncated [ 165.305233][ T1028] loop0: p2 p4 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="bbda80ec54f5ed070d7096c35d1c62", 0xf}, {&(0x7f00000002c0)="40e4f7367308b8837713e7b4c267ee027b0e783bc2ce047df69579fb5df659c1405110852ad4b07730df8785c36ad26ba34021faa464642454d9d8d040470f0eb76b993c3d5208ddfc277c935ef7082ac13ff48d65dd99960b345b44754350ad96e62815ad4b5d52feca0965dde94667a066637b82361b8b055aebf439dc8ede74a2c6d9a65ca9418b", 0x89}, {&(0x7f0000000380)="c9f8f4fd847d3d4bc42794c3fb9d1467a098de957d66459025a137688efcd89d79e5a3dbd28632ed1923e24eb9917e6998a82cf40cfa90ec9b45b646286396ab1f265fa197eb163fd77fd9c98b4c5a1fbf0a98ee621739928af1484bf1a892f1798c2fc611b3ee855bad78004c314e61920ee393bd17c1d714e6b0f03cfea747249c94e968f08e3ee932416fd0380736044aeb20bf07ea9813829f1c5db8db887a4e5d6e71d17f604ade0be0efe0a06f45a354a234f075076a8ecb6c5dba0e49651aa6f56873e6dac9232e8821a0443559d8c72c982756d7128d8f0a7546790387fc9e", 0xe3}, {&(0x7f0000000480)="2223bea75f9c62d5403449bf5ac6fbf6ee6cc10672a08a06d4d6205449e6ef48940b82992913ce464f890114ce4197c2337497a6cb76c82e3da39c16f912c65ad01f1f6e494e3e4d5426f3f7f7750ce2822bbb72918e7ada1f33b5093d8642632f9684a046a02ef987ac040775bde766aa7822d8fa2c3bc1ad4dc62fe2106dfe84b7b69d9114f6e2ab53ee8474775c6910fc506636404dc76f4e47d84b", 0x9d}, {&(0x7f00000008c0)="9b9cd908e3fcdaee8ce1cad722e4132abe75d0f39c40e70faf67b80b16905dd015a38c78f5cacc1d4a784eff50c4556c2e899bd1ffd8eca100607e007dd48f88e5620f77ff612fbad770fc6ea3e6da5fa959e281a7a69b0954079d48da423a116319a6170a859fef41d7fae0bddf2e42224cf76e1e8f7be95b049e1b2bfd071cf093d1262ac77963d7141d306300518884d25d8a77253a4bd9ad800a3f8f818c4f9851303cd7aa2373b2e7edc390f9ee707e6a7dc1471948b23210395f97dc6f5e0461d7fd97e966ce590f44e7b22809", 0xd0}, {&(0x7f0000000640)="2de2d252e0dc51a4f904f93a24b16ea0b79cf5c94f284de6a4c56077b28faa58ee052010ce7f2439915f47fd8f56291f32b4efd1cb3108f774cd585a96bd36e2904f0c5f719aab072979b9d0296995f4aabd288d412f6f7151f979a89762a094d4c4e6735e0ec4057dc6617844f18937134e4b093a02936e62943bec5160fa48bf683b5fd701fc0d91580cd7689e928b23f077dea33f595188689a4a24a9769b4533673e7a77bc25574f2fb0aea26c2a034f0e701c59a1a7f2be5fee7c245b219c93878288ac3d2fc425cb7337624df68c1398c67f8033864736d8b7d8636226e03ab21d2327faaf85caf52d1b112e25c91a23", 0xf3}, {&(0x7f0000000740)="fbf26a005a8dcbdc200bd477889ebd3cefae582ad7fabd14bf6e1d40b019a269de66733b9cbb6d9949156c2d642406f3c464dfb78bbb47d1ae19a23c446d65f5731c30076c2a7fbb119bb1c02fc9f1ffe61135fb0fbb892d41d629307d05e71d9fb37ce760207aa28c6deed6f8e93a8ff59e546266782d4f193d26e9ba", 0x7d}], 0x7, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}], 0x18}, 0x40c0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000040)=0x80, &(0x7f0000000140)=@ax25={{}, [@bcast, @remote, @bcast, @default, @remote, @null, @rose]}, 0x0, 0x0, 0x1}, 0x800) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 5: syz_read_part_table(0x6300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 1: syz_read_part_table(0x20000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="bbda80ec54f5ed070d7096c35d1c62", 0xf}, {&(0x7f00000002c0)="40e4f7367308b8837713e7b4c267ee027b0e783bc2ce047df69579fb5df659c1405110852ad4b07730df8785c36ad26ba34021faa464642454d9d8d040470f0eb76b993c3d5208ddfc277c935ef7082ac13ff48d65dd99960b345b44754350ad96e62815ad4b5d52feca0965dde94667a066637b82361b8b055aebf439dc8ede74a2c6d9a65ca9418b", 0x89}, {&(0x7f0000000380)="c9f8f4fd847d3d4bc42794c3fb9d1467a098de957d66459025a137688efcd89d79e5a3dbd28632ed1923e24eb9917e6998a82cf40cfa90ec9b45b646286396ab1f265fa197eb163fd77fd9c98b4c5a1fbf0a98ee621739928af1484bf1a892f1798c2fc611b3ee855bad78004c314e61920ee393bd17c1d714e6b0f03cfea747249c94e968f08e3ee932416fd0380736044aeb20bf07ea9813829f1c5db8db887a4e5d6e71d17f604ade0be0efe0a06f45a354a234f075076a8ecb6c5dba0e49651aa6f56873e6dac9232e8821a0443559d8c72c982756d7128d8f0a7546790387fc9e", 0xe3}, {&(0x7f0000000480)="2223bea75f9c62d5403449bf5ac6fbf6ee6cc10672a08a06d4d6205449e6ef48940b82992913ce464f890114ce4197c2337497a6cb76c82e3da39c16f912c65ad01f1f6e494e3e4d5426f3f7f7750ce2822bbb72918e7ada1f33b5093d8642632f9684a046a02ef987ac040775bde766aa7822d8fa2c3bc1ad4dc62fe2106dfe84b7b69d9114f6e2ab53ee8474775c6910fc506636404dc76f4e47d84b", 0x9d}, {&(0x7f00000008c0)="9b9cd908e3fcdaee8ce1cad722e4132abe75d0f39c40e70faf67b80b16905dd015a38c78f5cacc1d4a784eff50c4556c2e899bd1ffd8eca100607e007dd48f88e5620f77ff612fbad770fc6ea3e6da5fa959e281a7a69b0954079d48da423a116319a6170a859fef41d7fae0bddf2e42224cf76e1e8f7be95b049e1b2bfd071cf093d1262ac77963d7141d306300518884d25d8a77253a4bd9ad800a3f8f818c4f9851303cd7aa2373b2e7edc390f9ee707e6a7dc1471948b23210395f97dc6f5e0461d7fd97e966ce590f44e7b22809", 0xd0}, {&(0x7f0000000640)="2de2d252e0dc51a4f904f93a24b16ea0b79cf5c94f284de6a4c56077b28faa58ee052010ce7f2439915f47fd8f56291f32b4efd1cb3108f774cd585a96bd36e2904f0c5f719aab072979b9d0296995f4aabd288d412f6f7151f979a89762a094d4c4e6735e0ec4057dc6617844f18937134e4b093a02936e62943bec5160fa48bf683b5fd701fc0d91580cd7689e928b23f077dea33f595188689a4a24a9769b4533673e7a77bc25574f2fb0aea26c2a034f0e701c59a1a7f2be5fee7c245b219c93878288ac3d2fc425cb7337624df68c1398c67f8033864736d8b7d8636226e03ab21d2327faaf85caf52d1b112e25c91a23", 0xf3}, {&(0x7f0000000740)="fbf26a005a8dcbdc200bd477889ebd3cefae582ad7fabd14bf6e1d40b019a269de66733b9cbb6d9949156c2d642406f3c464dfb78bbb47d1ae19a23c446d65f5731c30076c2a7fbb119bb1c02fc9f1ffe61135fb0fbb892d41d629307d05e71d9fb37ce760207aa28c6deed6f8e93a8ff59e546266782d4f193d26e9ba", 0x7d}], 0x7, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}], 0x18}, 0x40c0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000040)=0x80, &(0x7f0000000140)=@ax25={{}, [@bcast, @remote, @bcast, @default, @remote, @null, @rose]}, 0x0, 0x0, 0x1}, 0x800) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.308813][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 165.316096][T19139] loop1: p4 size 2097152 extends beyond EOD, truncated [ 165.324516][T19127] loop5: p4 size 2097152 extends beyond EOD, truncated [ 165.332614][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 165.344555][T19197] loop0: p2 p4 [ 165.348246][T19197] loop0: p2 size 327680 extends beyond EOD, truncated 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="bbda80ec54f5ed070d7096c35d1c62", 0xf}, {&(0x7f00000002c0)="40e4f7367308b8837713e7b4c267ee027b0e783bc2ce047df69579fb5df659c1405110852ad4b07730df8785c36ad26ba34021faa464642454d9d8d040470f0eb76b993c3d5208ddfc277c935ef7082ac13ff48d65dd99960b345b44754350ad96e62815ad4b5d52feca0965dde94667a066637b82361b8b055aebf439dc8ede74a2c6d9a65ca9418b", 0x89}, {&(0x7f0000000380)="c9f8f4fd847d3d4bc42794c3fb9d1467a098de957d66459025a137688efcd89d79e5a3dbd28632ed1923e24eb9917e6998a82cf40cfa90ec9b45b646286396ab1f265fa197eb163fd77fd9c98b4c5a1fbf0a98ee621739928af1484bf1a892f1798c2fc611b3ee855bad78004c314e61920ee393bd17c1d714e6b0f03cfea747249c94e968f08e3ee932416fd0380736044aeb20bf07ea9813829f1c5db8db887a4e5d6e71d17f604ade0be0efe0a06f45a354a234f075076a8ecb6c5dba0e49651aa6f56873e6dac9232e8821a0443559d8c72c982756d7128d8f0a7546790387fc9e", 0xe3}, {&(0x7f0000000480)="2223bea75f9c62d5403449bf5ac6fbf6ee6cc10672a08a06d4d6205449e6ef48940b82992913ce464f890114ce4197c2337497a6cb76c82e3da39c16f912c65ad01f1f6e494e3e4d5426f3f7f7750ce2822bbb72918e7ada1f33b5093d8642632f9684a046a02ef987ac040775bde766aa7822d8fa2c3bc1ad4dc62fe2106dfe84b7b69d9114f6e2ab53ee8474775c6910fc506636404dc76f4e47d84b", 0x9d}, {&(0x7f00000008c0)="9b9cd908e3fcdaee8ce1cad722e4132abe75d0f39c40e70faf67b80b16905dd015a38c78f5cacc1d4a784eff50c4556c2e899bd1ffd8eca100607e007dd48f88e5620f77ff612fbad770fc6ea3e6da5fa959e281a7a69b0954079d48da423a116319a6170a859fef41d7fae0bddf2e42224cf76e1e8f7be95b049e1b2bfd071cf093d1262ac77963d7141d306300518884d25d8a77253a4bd9ad800a3f8f818c4f9851303cd7aa2373b2e7edc390f9ee707e6a7dc1471948b23210395f97dc6f5e0461d7fd97e966ce590f44e7b22809", 0xd0}, {&(0x7f0000000640)="2de2d252e0dc51a4f904f93a24b16ea0b79cf5c94f284de6a4c56077b28faa58ee052010ce7f2439915f47fd8f56291f32b4efd1cb3108f774cd585a96bd36e2904f0c5f719aab072979b9d0296995f4aabd288d412f6f7151f979a89762a094d4c4e6735e0ec4057dc6617844f18937134e4b093a02936e62943bec5160fa48bf683b5fd701fc0d91580cd7689e928b23f077dea33f595188689a4a24a9769b4533673e7a77bc25574f2fb0aea26c2a034f0e701c59a1a7f2be5fee7c245b219c93878288ac3d2fc425cb7337624df68c1398c67f8033864736d8b7d8636226e03ab21d2327faaf85caf52d1b112e25c91a23", 0xf3}, {&(0x7f0000000740)="fbf26a005a8dcbdc200bd477889ebd3cefae582ad7fabd14bf6e1d40b019a269de66733b9cbb6d9949156c2d642406f3c464dfb78bbb47d1ae19a23c446d65f5731c30076c2a7fbb119bb1c02fc9f1ffe61135fb0fbb892d41d629307d05e71d9fb37ce760207aa28c6deed6f8e93a8ff59e546266782d4f193d26e9ba", 0x7d}], 0x7, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}], 0x18}, 0x40c0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.357767][T19197] loop0: p4 size 2097152 extends beyond EOD, truncated [ 165.387601][T19173] loop3: detected capacity change from 0 to 1 01:34:03 executing program 3: syz_read_part_table(0xa, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4: syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000280)="bbda80ec54f5ed070d7096c35d1c62", 0xf}, {&(0x7f00000002c0)="40e4f7367308b8837713e7b4c267ee027b0e783bc2ce047df69579fb5df659c1405110852ad4b07730df8785c36ad26ba34021faa464642454d9d8d040470f0eb76b993c3d5208ddfc277c935ef7082ac13ff48d65dd99960b345b44754350ad96e62815ad4b5d52feca0965dde94667a066637b82361b8b055aebf439dc8ede74a2c6d9a65ca9418b", 0x89}, {&(0x7f0000000380)="c9f8f4fd847d3d4bc42794c3fb9d1467a098de957d66459025a137688efcd89d79e5a3dbd28632ed1923e24eb9917e6998a82cf40cfa90ec9b45b646286396ab1f265fa197eb163fd77fd9c98b4c5a1fbf0a98ee621739928af1484bf1a892f1798c2fc611b3ee855bad78004c314e61920ee393bd17c1d714e6b0f03cfea747249c94e968f08e3ee932416fd0380736044aeb20bf07ea9813829f1c5db8db887a4e5d6e71d17f604ade0be0efe0a06f45a354a234f075076a8ecb6c5dba0e49651aa6f56873e6dac9232e8821a0443559d8c72c982756d7128d8f0a7546790387fc9e", 0xe3}, {&(0x7f0000000480)="2223bea75f9c62d5403449bf5ac6fbf6ee6cc10672a08a06d4d6205449e6ef48940b82992913ce464f890114ce4197c2337497a6cb76c82e3da39c16f912c65ad01f1f6e494e3e4d5426f3f7f7750ce2822bbb72918e7ada1f33b5093d8642632f9684a046a02ef987ac040775bde766aa7822d8fa2c3bc1ad4dc62fe2106dfe84b7b69d9114f6e2ab53ee8474775c6910fc506636404dc76f4e47d84b", 0x9d}, {&(0x7f00000008c0)="9b9cd908e3fcdaee8ce1cad722e4132abe75d0f39c40e70faf67b80b16905dd015a38c78f5cacc1d4a784eff50c4556c2e899bd1ffd8eca100607e007dd48f88e5620f77ff612fbad770fc6ea3e6da5fa959e281a7a69b0954079d48da423a116319a6170a859fef41d7fae0bddf2e42224cf76e1e8f7be95b049e1b2bfd071cf093d1262ac77963d7141d306300518884d25d8a77253a4bd9ad800a3f8f818c4f9851303cd7aa2373b2e7edc390f9ee707e6a7dc1471948b23210395f97dc6f5e0461d7fd97e966ce590f44e7b22809", 0xd0}, {&(0x7f0000000640)="2de2d252e0dc51a4f904f93a24b16ea0b79cf5c94f284de6a4c56077b28faa58ee052010ce7f2439915f47fd8f56291f32b4efd1cb3108f774cd585a96bd36e2904f0c5f719aab072979b9d0296995f4aabd288d412f6f7151f979a89762a094d4c4e6735e0ec4057dc6617844f18937134e4b093a02936e62943bec5160fa48bf683b5fd701fc0d91580cd7689e928b23f077dea33f595188689a4a24a9769b4533673e7a77bc25574f2fb0aea26c2a034f0e701c59a1a7f2be5fee7c245b219c93878288ac3d2fc425cb7337624df68c1398c67f8033864736d8b7d8636226e03ab21d2327faaf85caf52d1b112e25c91a23", 0xf3}, {&(0x7f0000000740)="fbf26a005a8dcbdc200bd477889ebd3cefae582ad7fabd14bf6e1d40b019a269de66733b9cbb6d9949156c2d642406f3c464dfb78bbb47d1ae19a23c446d65f5731c30076c2a7fbb119bb1c02fc9f1ffe61135fb0fbb892d41d629307d05e71d9fb37ce760207aa28c6deed6f8e93a8ff59e546266782d4f193d26e9ba", 0x7d}], 0x7, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1f}}], 0x18}, 0x40c0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 165.439173][T19173] loop3: p2 p4 [ 165.442753][T19173] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.455002][T19251] loop1: detected capacity change from 0 to 256 [ 165.470762][T19173] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.478481][T19264] loop5: detected capacity change from 0 to 49 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 4: syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.515222][T19251] loop1: p2 p4 [ 165.518858][ T1028] loop3: p2 p4 [ 165.518923][T19251] loop1: p2 size 327680 extends beyond EOD, truncated [ 165.522496][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.530482][T19251] loop1: p4 size 2097152 extends beyond EOD, truncated [ 165.551716][T19264] loop5: p2 p4 [ 165.555415][T19264] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.562402][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.570916][T19264] loop5: p4 size 2097152 extends beyond EOD, truncated [ 165.578496][T19289] loop0: detected capacity change from 0 to 5 [ 165.635508][T19289] loop0: p2 p4 [ 165.640592][T19289] loop0: p2 size 327680 extends beyond EOD, truncated [ 165.646752][T19251] loop1: detected capacity change from 0 to 256 [ 165.649175][T19289] loop0: p4 size 2097152 extends beyond EOD, truncated [ 165.654307][T19264] loop5: detected capacity change from 0 to 49 [ 165.663264][T19298] loop3: detected capacity change from 0 to 1 [ 165.675166][T19251] loop1: p2 p4 [ 165.678727][T19251] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:03 executing program 5: syz_read_part_table(0x6800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4: syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.686035][T19264] loop5: p2 p4 [ 165.686140][ T1028] loop3: p2 p4 [ 165.690589][T19264] loop5: p2 size 327680 extends beyond EOD, truncated [ 165.703550][T19264] loop5: p4 size 2097152 extends beyond EOD, truncated [ 165.706489][T19251] loop1: p4 size 2097152 extends beyond EOD, truncated [ 165.717781][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.724855][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.733092][T19298] loop3: p2 p4 01:34:03 executing program 1: syz_read_part_table(0x40000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 165.736907][T19298] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.744204][T19298] loop3: p4 size 2097152 extends beyond EOD, truncated [ 165.817645][T19356] loop0: detected capacity change from 0 to 5 [ 165.830320][T19298] loop3: detected capacity change from 0 to 1 [ 165.837547][T19371] loop5: detected capacity change from 0 to 52 [ 165.843845][T19370] loop1: detected capacity change from 0 to 512 [ 165.885399][T19298] loop3: p2 p4 [ 165.885473][ T1028] loop0: p2 p4 [ 165.888962][T19371] loop5: p2 p4 [ 165.892615][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 165.896577][T19298] loop3: p2 size 327680 extends beyond EOD, truncated [ 165.903012][T19370] loop1: p2 p4 [ 165.910151][T19371] loop5: p2 size 327680 extends beyond EOD, truncated [ 165.913391][T19370] loop1: p2 size 327680 extends beyond EOD, truncated [ 165.921476][T19298] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:03 executing program 3: syz_read_part_table(0xb, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 165.927046][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 165.934555][T19371] loop5: p4 size 2097152 extends beyond EOD, truncated [ 165.948437][T19370] loop1: p4 size 2097152 extends beyond EOD, truncated [ 165.956378][T19356] loop0: p2 p4 [ 165.960120][T19356] loop0: p2 size 327680 extends beyond EOD, truncated [ 165.967685][T19356] loop0: p4 size 2097152 extends beyond EOD, truncated 01:34:03 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 166.003628][T19370] loop1: detected capacity change from 0 to 512 [ 166.024536][T19371] loop5: detected capacity change from 0 to 52 [ 166.045128][T19370] loop1: p2 p4 01:34:03 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 166.048645][T19370] loop1: p2 size 327680 extends beyond EOD, truncated [ 166.055109][T19371] loop5: p2 p4 [ 166.059791][T19371] loop5: p2 size 327680 extends beyond EOD, truncated [ 166.062216][T19427] loop0: detected capacity change from 0 to 5 [ 166.074172][T19370] loop1: p4 size 2097152 extends beyond EOD, truncated [ 166.092653][T19371] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:03 executing program 5: syz_read_part_table(0x6c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:03 executing program 1: syz_read_part_table(0x80000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 166.101971][T19443] loop3: detected capacity change from 0 to 1 [ 166.110552][ T1028] loop5: p2 p4 [ 166.114103][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 166.121687][T19427] loop0: p2 p4 [ 166.122616][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 166.126164][T19427] loop0: p2 size 327680 extends beyond EOD, truncated [ 166.145196][T19443] loop3: p2 p4 01:34:03 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 166.148767][T19443] loop3: p2 size 327680 extends beyond EOD, truncated [ 166.150988][T19427] loop0: p4 size 2097152 extends beyond EOD, truncated [ 166.163102][T19443] loop3: p4 size 2097152 extends beyond EOD, truncated [ 166.180380][T19471] FAULT_INJECTION: forcing a failure. [ 166.180380][T19471] name failslab, interval 1, probability 0, space 0, times 0 [ 166.193246][T19471] CPU: 0 PID: 19471 Comm: syz-executor.4 Not tainted 5.12.0-rc8-syzkaller #0 [ 166.202090][T19471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.212172][T19471] Call Trace: [ 166.215451][T19471] dump_stack+0x137/0x19d [ 166.219769][T19471] should_fail+0x23c/0x250 [ 166.224182][T19471] __should_failslab+0x81/0x90 [ 166.229321][T19471] should_failslab+0x5/0x20 [ 166.233811][T19471] kmem_cache_alloc_bulk+0x40/0x380 [ 166.239012][T19471] io_submit_sqes+0x515/0xaf0 [ 166.243735][T19471] __se_sys_io_uring_enter+0x217/0xb20 [ 166.249178][T19471] ? fput+0x2d/0x130 [ 166.253122][T19471] __x64_sys_io_uring_enter+0x74/0x80 [ 166.258474][T19471] do_syscall_64+0x34/0x50 [ 166.262878][T19471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.268757][T19471] RIP: 0033:0x466459 [ 166.272640][T19471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 166.292260][T19471] RSP: 002b:00007fdba85fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 166.300683][T19471] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 166.308832][T19471] RDX: 0000000000000000 RSI: 0000000000003edb RDI: 0000000000000003 [ 166.316787][T19471] RBP: 00007fdba85fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 166.324755][T19471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.332824][T19471] R13: 00007ffd6d7fcb0f R14: 00007fdba85fa300 R15: 0000000000022000 [ 166.368268][T19443] loop3: detected capacity change from 0 to 1 [ 166.379091][T19481] loop1: detected capacity change from 0 to 1024 [ 166.405133][T19443] loop3: p2 p4 [ 166.408706][T19443] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:04 executing program 3: syz_read_part_table(0xc, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 166.417554][T19443] loop3: p4 size 2097152 extends beyond EOD, truncated [ 166.426100][T19481] loop1: p2 p4 [ 166.429755][T19481] loop1: p2 size 327680 extends beyond EOD, truncated [ 166.435356][T19503] loop5: detected capacity change from 0 to 54 [ 166.437369][T19481] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:04 executing program 1: syz_read_part_table(0x80040, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 166.466194][ T1028] loop3: p2 p4 [ 166.470045][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 166.478986][T19503] loop5: p2 p4 [ 166.482562][T19503] loop5: p2 size 327680 extends beyond EOD, truncated [ 166.495283][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 166.495952][T19503] loop5: p4 size 2097152 extends beyond EOD, truncated [ 166.506513][T19525] FAULT_INJECTION: forcing a failure. [ 166.506513][T19525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.522195][T19525] CPU: 0 PID: 19525 Comm: syz-executor.4 Not tainted 5.12.0-rc8-syzkaller #0 [ 166.530963][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.541012][T19525] Call Trace: [ 166.544311][T19525] dump_stack+0x137/0x19d [ 166.548753][T19525] should_fail+0x23c/0x250 [ 166.553146][T19525] should_fail_usercopy+0x16/0x20 [ 166.558180][T19525] _copy_to_user+0x1c/0x90 [ 166.562579][T19525] simple_read_from_buffer+0xab/0x120 [ 166.567932][T19525] proc_fail_nth_read+0xf6/0x140 [ 166.572989][T19525] ? rw_verify_area+0x136/0x250 [ 166.577847][T19525] ? proc_fault_inject_write+0x200/0x200 [ 166.583472][T19525] vfs_read+0x154/0x5d0 [ 166.587664][T19525] ? fput+0x2d/0x130 [ 166.591539][T19525] ? __se_sys_io_uring_enter+0x987/0xb20 [ 166.597200][T19525] ? __fget_light+0x21b/0x260 [ 166.601885][T19525] ? __cond_resched+0x11/0x40 [ 166.606539][T19525] ksys_read+0xce/0x180 [ 166.610760][T19525] __x64_sys_read+0x3e/0x50 [ 166.615243][T19525] do_syscall_64+0x34/0x50 [ 166.619653][T19525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.625572][T19525] RIP: 0033:0x4191dc [ 166.629535][T19525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 166.649134][T19525] RSP: 002b:00007fdba85fa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.657599][T19525] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004191dc 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 166.665549][T19525] RDX: 000000000000000f RSI: 00007fdba85fa1e0 RDI: 0000000000000004 [ 166.673498][T19525] RBP: 00007fdba85fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 166.681491][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.689446][T19525] R13: 00007ffd6d7fcb0f R14: 00007fdba85fa300 R15: 0000000000022000 [ 166.704944][T19523] loop0: detected capacity change from 0 to 5 [ 166.711220][T19530] loop1: detected capacity change from 0 to 1024 [ 166.732710][T19503] loop5: detected capacity change from 0 to 54 [ 166.755217][T19523] loop0: p2 p4 [ 166.758839][T19530] loop1: p2 p4 [ 166.762350][T19530] loop1: p2 size 327680 extends beyond EOD, truncated [ 166.770191][T19523] loop0: p2 size 327680 extends beyond EOD, truncated [ 166.772118][T19530] loop1: p4 size 2097152 extends beyond EOD, truncated [ 166.778756][T19523] loop0: p4 size 2097152 extends beyond EOD, truncated [ 166.785058][T19503] loop5: p2 p4 [ 166.794653][T19503] loop5: p2 size 327680 extends beyond EOD, truncated [ 166.802609][ T1028] loop0: p2 p4 [ 166.803767][T19503] loop5: p4 size 2097152 extends beyond EOD, truncated [ 166.806967][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 166.822264][T19568] loop3: detected capacity change from 0 to 1 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 5: syz_read_part_table(0x7400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:04 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 166.822487][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 166.829127][T19530] loop1: detected capacity change from 0 to 1024 [ 166.865156][T19568] loop3: p2 p4 [ 166.868797][T19568] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 166.879002][T19568] loop3: p4 size 2097152 extends beyond EOD, truncated [ 166.885992][T19530] loop1: p2 p4 [ 166.889512][T19530] loop1: p2 size 327680 extends beyond EOD, truncated [ 166.901722][T19530] loop1: p4 size 2097152 extends beyond EOD, truncated [ 166.913536][ T1028] loop3: p2 p4 [ 166.922765][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 166.932792][T19600] loop0: detected capacity change from 0 to 5 [ 166.940461][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 166.954472][T19614] loop5: detected capacity change from 0 to 58 [ 166.996226][ T1028] loop0: p2 p4 [ 166.998765][T19568] loop3: detected capacity change from 0 to 1 [ 166.999881][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 167.006585][T19614] loop5: p2 p4 [ 167.016324][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 167.016711][T19614] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.030971][T19614] loop5: p4 size 2097152 extends beyond EOD, truncated [ 167.040715][T19600] loop0: p2 p4 01:34:04 executing program 3: syz_read_part_table(0xd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:04 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x10, 0x0, 0x0, 0x0) 01:34:04 executing program 1: syz_read_part_table(0x100000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:04 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:04 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x2000, 0x0, 0x0, 0x0) [ 167.045918][T19600] loop0: p2 size 327680 extends beyond EOD, [ 167.045922][T19568] loop3: p2 p4 [ 167.046030][T19568] loop3: p2 size 327680 extends beyond EOD, [ 167.051898][T19600] truncated [ 167.052454][T19600] loop0: p4 size 2097152 extends beyond EOD, [ 167.055387][T19568] truncated [ 167.061336][T19600] truncated [ 167.077071][T19568] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.108780][T19614] loop5: detected capacity change from 0 to 58 01:34:04 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x800000, 0x0, 0x0, 0x0) [ 167.155191][ T1028] loop5: p2 p4 [ 167.158856][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.168139][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 167.175961][T19660] loop1: detected capacity change from 0 to 2048 [ 167.183387][T19614] loop5: p2 p4 [ 167.187110][T19614] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.197738][T19682] loop3: detected capacity change from 0 to 1 01:34:04 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.197985][T19614] loop5: p4 size 2097152 extends beyond EOD, truncated [ 167.203921][T19671] loop0: detected capacity change from 0 to 5 01:34:05 executing program 5: syz_read_part_table(0x7a00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x1000000, 0x0, 0x0, 0x0) 01:34:05 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.246332][T19660] loop1: p2 p4 [ 167.250897][T19660] loop1: p2 size 327680 extends beyond EOD, truncated [ 167.260894][T19660] loop1: p4 size 2097152 extends beyond EOD, truncated [ 167.265284][ T1028] loop3: p2 p4 [ 167.272884][T19671] loop0: p2 p4 [ 167.276673][T19671] loop0: p2 size 327680 extends beyond EOD, truncated [ 167.284162][T19671] loop0: p4 size 2097152 extends beyond EOD, truncated [ 167.284570][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.300480][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.315743][T19682] loop3: p2 p4 [ 167.319408][T19682] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.342296][T19682] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.350649][T19660] loop1: detected capacity change from 0 to 2048 [ 167.366619][T19737] loop5: detected capacity change from 0 to 61 [ 167.385999][T19682] loop3: detected capacity change from 0 to 1 [ 167.405068][T19660] loop1: p2 p4 [ 167.405340][T19682] loop3: p2 p4 [ 167.408750][T19737] loop5: p2 p4 [ 167.412222][T19682] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.416667][T19660] loop1: p2 size 327680 extends beyond EOD, truncated [ 167.424040][T19737] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.429855][T19682] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.443759][T19737] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:05 executing program 3: syz_read_part_table(0xe, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 167.451030][T19660] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:05 executing program 1: syz_read_part_table(0x200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x10000000, 0x0, 0x0, 0x0) 01:34:05 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.475765][ T1028] loop3: p2 p4 [ 167.479311][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.488640][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.492517][T19766] loop0: detected capacity change from 0 to 5 [ 167.507447][T19737] loop5: detected capacity change from 0 to 61 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x20000000, 0x0, 0x0, 0x0) [ 167.531992][T19776] loop3: detected capacity change from 0 to 1 [ 167.540370][T19766] loop0: p2 p4 [ 167.544024][T19766] loop0: p2 size 327680 extends beyond EOD, truncated [ 167.551960][T19737] loop5: p2 p4 [ 167.553400][T19766] loop0: p4 size 2097152 extends beyond EOD, truncated [ 167.556916][T19737] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.570231][T19776] loop3: p2 p4 [ 167.573799][T19776] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:05 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:05 executing program 5: syz_read_part_table(0x8004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x10, 0x0, 0x0) 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.585979][ T1028] loop0: p2 p4 [ 167.586129][T19737] loop5: p4 size 2097152 extends beyond EOD, truncated [ 167.591476][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 167.604714][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 167.604847][T19776] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.626192][T19810] loop1: detected capacity change from 0 to 4096 [ 167.675373][T19810] loop1: p2 p4 [ 167.689889][T19810] loop1: p2 size 327680 extends beyond EOD, truncated [ 167.699190][T19776] loop3: detected capacity change from 0 to 1 [ 167.710763][T19810] loop1: p4 size 2097152 extends beyond EOD, truncated [ 167.735218][T19776] loop3: p2 p4 [ 167.735974][T19848] loop5: detected capacity change from 0 to 64 [ 167.739042][T19841] loop0: detected capacity change from 0 to 5 [ 167.745781][T19776] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.758757][T19848] loop5: p2 p4 [ 167.762772][T19776] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.762931][T19848] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.777184][T19848] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:05 executing program 3: syz_read_part_table(0xf, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2000, 0x0, 0x0) [ 167.784435][T19810] loop1: detected capacity change from 0 to 4096 [ 167.791676][ T1028] loop3: p2 p4 [ 167.795229][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 167.802538][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.805667][T19841] loop0: p2 p4 [ 167.813199][T19841] loop0: p2 size 327680 extends beyond EOD, truncated [ 167.820420][T19810] loop1: p2 p4 [ 167.823907][T19810] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:05 executing program 1: syz_read_part_table(0x900000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x800000, 0x0, 0x0) 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x2613, 0x0, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 167.829813][T19841] loop0: p4 size 2097152 extends beyond EOD, truncated [ 167.838062][T19810] loop1: p4 size 2097152 extends beyond EOD, truncated [ 167.849937][T19848] loop5: detected capacity change from 0 to 64 01:34:05 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x2613, 0x0, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:05 executing program 5: syz_read_part_table(0x9000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000, 0x0, 0x0) [ 167.895153][T19848] loop5: p2 p4 [ 167.898943][T19848] loop5: p2 size 327680 extends beyond EOD, truncated [ 167.902987][T19894] loop3: detected capacity change from 0 to 1 [ 167.907148][T19848] loop5: p4 size 2097152 extends beyond EOD, truncated [ 167.935101][ T1028] loop3: p2 p4 [ 167.938675][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:05 executing program 2: r0 = syz_io_uring_setup(0x2613, 0x0, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:05 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x10000000, 0x0, 0x0) [ 167.952719][T19920] loop1: detected capacity change from 0 to 18432 [ 167.955729][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 167.973996][T19922] loop0: detected capacity change from 0 to 5 [ 167.989510][T19894] loop3: p2 p4 [ 167.995861][T19920] loop1: p2 p4 [ 167.999957][T19894] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.006921][T19920] loop1: p2 size 327680 extends beyond EOD, truncated [ 168.013935][T19894] loop3: p4 size 2097152 extends beyond EOD, truncated [ 168.015050][T19922] loop0: p2 p4 [ 168.024752][T19922] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.029591][T19920] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.039953][T19922] loop0: p4 size 2097152 extends beyond EOD, truncated [ 168.047625][T19951] loop5: detected capacity change from 0 to 72 [ 168.067402][T19920] loop1: detected capacity change from 0 to 18432 [ 168.085399][T19920] loop1: p2 p4 [ 168.088949][T19920] loop1: p2 size 327680 extends beyond EOD, truncated [ 168.097699][T19951] loop5: p2 p4 [ 168.106564][T19894] loop3: detected capacity change from 0 to 1 [ 168.107751][T19951] loop5: p2 size 327680 extends beyond EOD, truncated [ 168.117934][T19920] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.122684][T19951] loop5: p4 size 2097152 extends beyond EOD, truncated [ 168.146673][ T1028] loop3: p2 p4 [ 168.150269][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.157872][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 168.167723][T19894] loop3: p2 p4 [ 168.168135][T19951] loop5: detected capacity change from 0 to 72 [ 168.171428][T19894] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.184737][T19894] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:06 executing program 3: syz_read_part_table(0x10, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x20000000, 0x0, 0x0) 01:34:06 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 1: syz_read_part_table(0xe0ffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 5: syz_read_part_table(0x9826, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 168.205274][T19951] loop5: p2 p4 [ 168.208989][T19951] loop5: p2 size 327680 extends beyond EOD, truncated [ 168.216308][T19951] loop5: p4 size 2097152 extends beyond EOD, truncated [ 168.235759][ T1028] loop3: p2 p4 [ 168.239287][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.247742][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x10000000000, 0x0, 0x0) [ 168.280701][T20016] loop0: detected capacity change from 0 to 5 [ 168.285934][T20021] loop1: detected capacity change from 0 to 28799 [ 168.305181][T20021] loop1: p2 p4 [ 168.308771][T20021] loop1: p2 size 327680 extends beyond EOD, truncated [ 168.321440][T20021] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.338897][T20031] loop3: detected capacity change from 0 to 1 [ 168.348573][ T1028] loop0: p2 p4 [ 168.352359][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.359943][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 168.369125][T20016] loop0: p2 p4 [ 168.372695][T20016] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.385031][T20031] loop3: p2 p4 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000000000, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x80000000000000, 0x0, 0x0) 01:34:06 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) [ 168.388859][T20031] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.394404][T20016] loop0: p4 size 2097152 extends beyond EOD, truncated [ 168.403613][T20021] loop1: detected capacity change from 0 to 28799 [ 168.410576][T20031] loop3: p4 size 2097152 extends beyond EOD, truncated [ 168.424933][T20058] loop5: detected capacity change from 0 to 76 [ 168.475391][T20021] loop1: p2 p4 [ 168.475870][T20058] loop5: p2 p4 [ 168.487564][T20021] loop1: p2 size 327680 extends beyond EOD, truncated [ 168.496700][T20058] loop5: p2 size 327680 extends beyond EOD, truncated [ 168.512103][T20058] loop5: p4 size 2097152 extends beyond EOD, truncated [ 168.520455][T20031] loop3: detected capacity change from 0 to 1 [ 168.528305][T20021] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.556301][T20101] loop0: detected capacity change from 0 to 5 01:34:06 executing program 3: syz_read_part_table(0x11, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x100000000000000, 0x0, 0x0) 01:34:06 executing program 1: syz_read_part_table(0x1000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 5: syz_read_part_table(0xf504, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 168.595672][ T1028] loop0: p2 p4 [ 168.599238][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.599592][T20031] loop3: p2 p4 [ 168.607041][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 168.610665][T20031] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.616569][T20058] loop5: detected capacity change from 0 to 76 [ 168.625392][T20031] loop3: p4 size 2097152 extends beyond EOD, truncated [ 168.637207][T20101] loop0: p2 p4 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x1000000000000000, 0x0, 0x0) [ 168.640875][T20101] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.648470][T20101] loop0: p4 size 2097152 extends beyond EOD, truncated 01:34:06 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x2000000000000000, 0x0, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 168.732528][T20134] loop1: detected capacity change from 0 to 32768 [ 168.765072][T20134] loop1: p2 p4 [ 168.768702][T20134] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 168.790750][T20134] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.799193][T20163] loop3: detected capacity change from 0 to 1 [ 168.805983][T20169] loop5: detected capacity change from 0 to 122 [ 168.806082][T20166] loop0: detected capacity change from 0 to 5 [ 168.819189][ T1028] loop1: p2 p4 [ 168.825252][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 168.840622][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 168.845166][T20169] loop5: p2 p4 [ 168.851118][T20169] loop5: p2 size 327680 extends beyond EOD, truncated [ 168.858656][T20169] loop5: p4 size 2097152 extends beyond EOD, truncated [ 168.861229][T20166] loop0: p2 p4 [ 168.869766][T20163] loop3: p2 p4 [ 168.876638][T20163] loop3: p2 size 327680 extends beyond EOD, truncated [ 168.880424][T20166] loop0: p2 size 327680 extends beyond EOD, truncated [ 168.884133][T20163] loop3: p4 size 2097152 extends beyond EOD, truncated [ 168.896584][T20166] loop0: p4 size 2097152 extends beyond EOD, truncated [ 168.921606][T20134] loop1: detected capacity change from 0 to 32768 [ 168.955682][T20169] loop5: detected capacity change from 0 to 122 [ 168.958200][T20163] loop3: detected capacity change from 0 to 1 01:34:06 executing program 3: syz_read_part_table(0x12, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0xffffffff00000000, 0x0, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 1: syz_read_part_table(0x2000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 169.017539][T20163] loop3: p2 p4 [ 169.020340][T20169] loop5: p2 p4 [ 169.024523][T20169] loop5: p2 size 327680 extends beyond EOD, truncated [ 169.025073][T20163] loop3: p2 size 327680 extends beyond EOD, truncated [ 169.038809][T20163] loop3: p4 size 2097152 extends beyond EOD, truncated [ 169.038932][T20169] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:06 executing program 5: syz_read_part_table(0xff0f, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:06 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x10) [ 169.077795][T20242] loop1: detected capacity change from 0 to 65536 01:34:06 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x2000) 01:34:06 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.127822][ T1028] loop1: p2 p4 [ 169.131429][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.141569][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.151474][T20262] loop0: detected capacity change from 0 to 5 [ 169.153178][T20242] loop1: p2 p4 [ 169.161196][T20242] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x800000) [ 169.185115][T20242] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.199967][T20279] loop3: detected capacity change from 0 to 1 [ 169.202846][T20283] loop5: detected capacity change from 0 to 127 [ 169.206399][T20262] loop0: p2 p4 [ 169.220684][T20262] loop0: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.231010][T20262] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.243173][T20242] loop1: detected capacity change from 0 to 65536 [ 169.255706][ T1028] loop0: p2 p4 [ 169.259272][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 169.265039][T20279] loop3: p2 p4 [ 169.269872][T20283] loop5: p2 p4 [ 169.269907][T20279] loop3: p2 size 327680 extends beyond EOD, truncated [ 169.273457][T20283] loop5: p2 size 327680 extends beyond EOD, truncated [ 169.281208][T20279] loop3: p4 size 2097152 extends beyond EOD, truncated [ 169.299629][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.307019][T20242] loop1: p2 p4 [ 169.307254][T20283] loop5: p4 size 2097152 extends beyond EOD, truncated [ 169.310862][T20242] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.339679][T20242] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.346717][T20279] loop3: detected capacity change from 0 to 1 [ 169.377666][T20283] loop5: detected capacity change from 0 to 127 [ 169.385165][T20279] loop3: p2 p4 01:34:07 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1000000) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:07 executing program 3: syz_read_part_table(0x13, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 169.389288][T20279] loop3: p2 size 327680 extends beyond EOD, truncated [ 169.397011][ T1028] loop1: p2 p4 [ 169.398680][T20279] loop3: p4 size 2097152 extends beyond EOD, truncated [ 169.400588][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.414590][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.421777][T20283] loop5: p2 p4 [ 169.425818][T20283] loop5: p2 size 327680 extends beyond EOD, truncated [ 169.433640][T20283] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:07 executing program 5: syz_read_part_table(0x40000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:07 executing program 1: syz_read_part_table(0x2040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x10000000) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.461514][T20365] loop0: detected capacity change from 0 to 5 [ 169.496322][ T1028] loop0: p2 p4 [ 169.499916][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x17}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x20000000) [ 169.511842][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.518876][T20377] loop3: detected capacity change from 0 to 1 [ 169.541675][T20365] loop0: p2 p4 [ 169.545551][T20365] loop0: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.565106][T20377] loop3: p2 p4 [ 169.568642][T20377] loop3: p2 size 327680 extends beyond EOD, truncated [ 169.582102][T20407] loop1: detected capacity change from 0 to 66048 [ 169.590156][T20365] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.590235][T20377] loop3: p4 size 2097152 extends beyond EOD, truncated [ 169.604487][T20410] loop5: detected capacity change from 0 to 512 [ 169.625019][T20407] loop1: p2 p4 [ 169.628639][T20407] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.639231][T20407] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.660461][T20377] loop3: detected capacity change from 0 to 1 [ 169.660561][T20410] loop5: p2 p4 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x10000000000) 01:34:07 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.671243][T20410] loop5: p2 size 327680 extends beyond EOD, truncated [ 169.678672][T20410] loop5: p4 size 2097152 extends beyond EOD, truncated [ 169.695010][T20377] loop3: p2 p4 [ 169.695214][T20407] loop1: detected capacity change from 0 to 66048 [ 169.698685][T20377] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 3: syz_read_part_table(0x24, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 169.726199][T20377] loop3: p4 size 2097152 extends beyond EOD, truncated [ 169.755127][ T1028] loop1: p2 p4 [ 169.758754][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.766743][T20410] loop5: detected capacity change from 0 to 512 [ 169.771154][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.781180][T20407] loop1: p2 p4 [ 169.782891][T20477] loop0: detected capacity change from 0 to 5 [ 169.784706][T20407] loop1: p2 size 327680 extends beyond EOD, truncated [ 169.796912][T20410] loop5: p2 p4 [ 169.798229][T20407] loop1: p4 size 2097152 extends beyond EOD, truncated [ 169.801727][T20410] loop5: p2 size 327680 extends beyond EOD, truncated [ 169.816593][T20410] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:07 executing program 5: syz_read_part_table(0x80000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1000000000000) 01:34:07 executing program 1: syz_read_part_table(0x3000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 169.835123][T20494] loop3: detected capacity change from 0 to 1 [ 169.865423][T20494] loop3: p2 p4 [ 169.866028][T20477] loop0: p2 p4 [ 169.871756][T20494] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x80000000000000) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.878006][T20477] loop0: p2 size 327680 extends beyond EOD, truncated [ 169.891732][T20477] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.902249][T20494] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x100000000000000) 01:34:07 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 169.931135][ T1028] loop0: p2 p4 [ 169.933479][T20513] loop1: detected capacity change from 0 to 98304 [ 169.934673][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 169.954157][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 169.975092][T20513] loop1: p2 p4 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x1000000000000000) 01:34:07 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 169.975179][T20494] loop3: detected capacity change from 0 to 1 [ 169.980848][T20513] loop1: p2 size 327680 extends beyond EOD, truncated [ 170.011398][T20513] loop1: p4 size 2097152 extends beyond EOD, truncated [ 170.019803][T20554] loop5: detected capacity change from 0 to 1024 [ 170.026957][T20494] loop3: p2 p4 01:34:07 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x2000000000000000) [ 170.033900][T20560] loop0: detected capacity change from 0 to 5 [ 170.041174][T20494] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.050872][ T1028] loop1: p2 p4 [ 170.054403][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 170.061797][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 170.065434][T20494] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.069143][T20554] loop5: p2 p4 [ 170.079819][T20560] loop0: p2 p4 01:34:07 executing program 3: syz_read_part_table(0x25, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 170.083451][T20560] loop0: p2 size 327680 extends beyond EOD, truncated [ 170.090407][T20554] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.098376][T20554] loop5: p4 size 2097152 extends beyond EOD, truncated [ 170.106856][T20560] loop0: p4 size 2097152 extends beyond EOD, truncated [ 170.153272][T20513] loop1: detected capacity change from 0 to 98304 [ 170.166384][T20554] loop5: detected capacity change from 0 to 1024 [ 170.183160][T20613] loop3: detected capacity change from 0 to 1 [ 170.195416][T20554] loop5: p2 p4 [ 170.198994][T20513] loop1: p2 p4 01:34:08 executing program 5: syz_read_part_table(0x80040, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 170.199016][T20554] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.202481][T20513] loop1: p2 size 327680 extends beyond EOD, truncated [ 170.216598][T20613] loop3: p2 p4 [ 170.220099][T20613] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.227886][T20554] loop5: p4 size 2097152 extends beyond EOD, truncated [ 170.232096][T20613] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.241947][T20513] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:08 executing program 1: syz_read_part_table(0x4000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x381}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.315502][T20613] loop3: detected capacity change from 0 to 1 [ 170.355179][T20613] loop3: p2 p4 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 3: syz_read_part_table(0x48, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 4: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x1698, 0xcdcd, 0x1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) io_uring_enter(r3, 0x35fd, 0x3e2f, 0x1, &(0x7f0000000140)={[0x8001]}, 0x8) [ 170.365683][T20613] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.380133][T20613] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.393673][T20648] loop0: detected capacity change from 0 to 5 [ 170.414341][T20665] loop5: detected capacity change from 0 to 1024 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.448419][ T1028] loop0: p2 p4 [ 170.452650][ T1028] loop0: p2 size 327680 extends beyond EOD, truncated [ 170.452838][T20665] loop5: p2 p4 [ 170.459610][T20676] loop1: detected capacity change from 0 to 131072 [ 170.469410][T20665] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.470272][T20665] loop5: p4 size 2097152 extends beyond EOD, truncated [ 170.483822][ T1028] loop0: p4 size 2097152 extends beyond EOD, truncated [ 170.497213][T20648] loop0: p2 p4 [ 170.500800][T20648] loop0: p2 size 327680 extends beyond EOD, truncated [ 170.514300][T20648] loop0: p4 size 2097152 extends beyond EOD, truncated [ 170.514944][T20676] loop1: p2 p4 [ 170.521859][T20705] loop3: detected capacity change from 0 to 1 [ 170.525882][T20676] loop1: p2 size 327680 extends beyond EOD, truncated [ 170.546131][T20665] loop5: detected capacity change from 0 to 1024 [ 170.557466][T20676] loop1: p4 size 2097152 extends beyond EOD, truncated [ 170.575181][T20665] loop5: p2 p4 [ 170.578734][T20705] loop3: p2 p4 [ 170.582990][T20665] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.596711][T20705] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.615605][T20665] loop5: p4 size 2097152 extends beyond EOD, truncated [ 170.622743][T20705] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.633354][T20676] loop1: detected capacity change from 0 to 131072 01:34:08 executing program 5: syz_read_part_table(0x100000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x5e44, &(0x7f0000000100)={0x0, 0xc7da, 0x4, 0x1, 0xd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) clock_getres(0x3, &(0x7f0000000040)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.650024][ T1028] loop3: p2 p4 [ 170.653783][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.661525][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:08 executing program 1: syz_read_part_table(0x5000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 0: syz_read_part_table(0xbee, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) poll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0x8002}], 0x2, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x5806, &(0x7f0000000100)={0x0, 0xe6ec, 0x4, 0x3, 0x17f, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) syz_io_uring_setup(0x21eb, &(0x7f0000000380)={0x0, 0x4a14, 0x2, 0x2, 0xd0, 0x0, r3}, &(0x7f00001d3000/0x4000)=nil, &(0x7f0000700000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000400)) syz_io_uring_setup(0x7d46, &(0x7f0000000440)={0x0, 0x194, 0x0, 0x1, 0x3a5, 0x0, r7}, &(0x7f000029a000/0x4000)=nil, &(0x7f000028e000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f000021a000/0x4000)=nil, 0x4000, 0xa, 0x1}, 0xffffffe0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r10 = socket$inet6(0xa, 0x800, 0x482dfe27) r11 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x2240}, 0x1, {0x0, r14}}, 0x7) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd=r7, 0x7fff, &(0x7f0000000240)="60431f4645fa8f6a6d244587ea38ecc3072e9c846285c2f25a635f6c063dd5d514615533edcb", 0x26, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.696432][T20676] loop1: p2 p4 [ 170.700028][T20676] loop1: p2 size 327680 extends beyond EOD, truncated [ 170.707432][T20676] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.745342][T20705] loop3: detected capacity change from 0 to 1 [ 170.754061][T20772] loop5: detected capacity change from 0 to 2048 [ 170.785080][ T1028] loop3: p2 p4 [ 170.788837][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.797593][T20780] loop0: detected capacity change from 0 to 5 [ 170.805561][T20772] loop5: p2 p4 [ 170.809140][T20772] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.816746][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.832792][T20772] loop5: p4 size 2097152 extends beyond EOD, truncated [ 170.840919][T20780] loop0: p2 p4 [ 170.851671][T20780] loop0: p2 size 327680 extends beyond EOD, truncated [ 170.858592][T20705] loop3: p2 p4 [ 170.862172][T20705] loop3: p2 size 327680 extends beyond EOD, truncated [ 170.873391][T20705] loop3: p4 size 2097152 extends beyond EOD, truncated [ 170.888579][T20780] loop0: p4 size 2097152 extends beyond EOD, truncated 01:34:08 executing program 3: syz_read_part_table(0x4c, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 170.900864][T20814] loop1: detected capacity change from 0 to 163840 [ 170.915970][T20772] loop5: detected capacity change from 0 to 2048 01:34:08 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x1698, 0xcdcd, 0x1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) io_uring_enter(r3, 0x35fd, 0x3e2f, 0x1, &(0x7f0000000140)={[0x8001]}, 0x8) [ 170.974275][T20814] loop1: p2 p4 [ 170.977877][T20772] loop5: p2 p4 [ 170.981509][T20772] loop5: p2 size 327680 extends beyond EOD, truncated [ 170.988484][T20814] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.014130][T20772] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.021739][T20814] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:08 executing program 5: syz_read_part_table(0x200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:08 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:08 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x1698, 0xcdcd, 0x1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) io_uring_enter(r3, 0x35fd, 0x3e2f, 0x1, &(0x7f0000000140)={[0x8001]}, 0x8) [ 171.057757][T20845] loop3: detected capacity change from 0 to 1 [ 171.069814][ T1028] loop1: p2 p4 [ 171.073395][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.090900][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.107901][T20845] loop3: p2 p4 [ 171.111538][T20845] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.141413][T20845] loop3: p4 size 2097152 extends beyond EOD, truncated [ 171.149411][T20814] loop1: detected capacity change from 0 to 163840 01:34:09 executing program 1: syz_read_part_table(0x6000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x1698, 0xcdcd, 0x1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) io_uring_enter(r3, 0x35fd, 0x3e2f, 0x1, &(0x7f0000000140)={[0x8001]}, 0x8) [ 171.173121][ T1028] loop3: p2 p4 [ 171.177144][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.184991][T20814] loop1: p2 p4 [ 171.187724][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 171.188735][T20814] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.202289][T20877] loop5: detected capacity change from 0 to 4096 [ 171.209767][T20814] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.234992][T20877] loop5: p2 p4 [ 171.238637][T20877] loop5: p2 size 327680 extends beyond EOD, truncated [ 171.259388][T20877] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.266753][T20845] loop3: detected capacity change from 0 to 1 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x1698, 0xcdcd, 0x1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 171.284431][ T1028] loop5: p2 p4 [ 171.288201][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 171.299830][T20845] loop3: p2 p4 [ 171.303473][T20845] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.303771][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.327219][T20845] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:09 executing program 3: syz_read_part_table(0x54, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 171.351549][T20918] loop1: detected capacity change from 0 to 196608 [ 171.375115][T20918] loop1: p2 p4 [ 171.378784][T20918] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 171.399224][T20918] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.407003][T20877] loop5: detected capacity change from 0 to 4096 [ 171.424975][ T1028] loop1: p2 p4 [ 171.429758][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.440104][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.442287][T20953] loop3: detected capacity change from 0 to 1 [ 171.447368][T20877] loop5: p2 p4 01:34:09 executing program 5: syz_read_part_table(0x900000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 171.474786][T20877] loop5: p2 size 327680 extends beyond EOD, truncated [ 171.486153][T20953] loop3: p2 p4 [ 171.489912][T20953] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.492436][T20877] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.504431][T20953] loop3: p4 size 2097152 extends beyond EOD, truncated [ 171.527179][T20918] loop1: detected capacity change from 0 to 196608 01:34:09 executing program 1: syz_read_part_table(0x6040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 01:34:09 executing program 3: syz_read_part_table(0x55, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 171.595230][T20918] loop1: p2 p4 [ 171.600222][T20918] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.607643][ T1028] loop5: p2 p4 [ 171.611208][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 171.620596][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.624215][T20918] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.673486][T20997] loop5: detected capacity change from 0 to 18432 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 171.724030][T21017] loop3: detected capacity change from 0 to 1 [ 171.734888][T20997] loop5: p2 p4 [ 171.738509][T20997] loop5: p2 size 327680 extends beyond EOD, truncated [ 171.746383][T20997] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.767340][T21023] loop1: detected capacity change from 0 to 197120 [ 171.805017][ T1028] loop3: p2 p4 [ 171.808646][T21023] loop1: p2 p4 [ 171.808652][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.812441][T21023] loop1: p2 size 327680 extends beyond EOD, truncated [ 171.838450][T20997] loop5: detected capacity change from 0 to 18432 [ 171.845366][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 171.873424][T21017] loop3: p2 p4 [ 171.877033][T21017] loop3: p2 size 327680 extends beyond EOD, truncated [ 171.884117][T21017] loop3: p4 size 2097152 extends beyond EOD, truncated [ 171.893256][T21023] loop1: p4 size 2097152 extends beyond EOD, truncated [ 171.894864][T20997] loop5: p2 p4 [ 171.909313][T20997] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:09 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 171.951083][T20997] loop5: p4 size 2097152 extends beyond EOD, truncated [ 171.976056][T21023] loop1: detected capacity change from 0 to 197120 [ 171.976126][T21017] loop3: detected capacity change from 0 to 1 01:34:09 executing program 5: syz_read_part_table(0xe0ffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:09 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="0800abbf118349b1"], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x448c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="0800abbf118349b1"], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x448c0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000841}, 0x8890) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r7, 0x10, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcd6a}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x6da6, 0x4, 0x2, 0x191, 0x0, r6}, &(0x7f00003cf000/0x3000)=nil, &(0x7f0000769000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x7f, {0x0, r6}, 0xff, 0x4, 0x0, {0x0, r9, r0}}, 0xffffffe0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xe0, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80c00}, 0x4004) [ 172.045332][ T1028] loop1: p2 p4 [ 172.053130][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.053395][T21017] loop3: p2 p4 [ 172.069405][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 172.072495][T21017] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:09 executing program 1: syz_read_part_table(0x7000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 2: syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:09 executing program 3: syz_read_part_table(0x60, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:09 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 172.089200][T21017] loop3: p4 size 2097152 extends beyond EOD, truncated [ 172.097933][T21023] loop1: p2 p4 [ 172.101541][T21023] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.133240][T21023] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:09 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 172.161979][T21098] loop5: detected capacity change from 0 to 28799 [ 172.177151][ T1028] loop1: p2 p4 [ 172.180676][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.194364][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x277c, &(0x7f0000000100)={0x0, 0xc050, 0x2, 0x2, 0x27e, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0x6, {0x0, r4}, 0xfffffff7, 0x4, 0x1}, 0x6) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:10 executing program 2: syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:10 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={[0xe9]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0], 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x10, r0, 0xa6b52000) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0xffffff7f, 0x0, 0x9effffff}}, 0x33fe0}}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3f, 0xff, 0x0, 0x2800000, 0x3, 0x3e, 0x8, 0xdf, 0x40, 0x26a, 0x200, 0x101, 0x38, 0x1, 0x7ff, 0x4, 0x94}, [{0x6, 0x6, 0xffffffff00000001, 0x7, 0xffffffffffffffff, 0x2, 0x10000, 0x4}, {0x70000000, 0x5, 0x88, 0x3, 0x1, 0x81, 0x1f, 0x4}], "1581db97d27a4fcfd6399cac762c1b98f496ccb92f6db3b1efe0df5cbee1d80f10612c250345bf5c3877078940d0fe6f93088eac8b02a05256ef5d9be18719381aeefc7ce35094321c158dbdfa9e", [[], [], []]}, 0x3fe) [ 172.215000][T21098] loop5: p2 p4 [ 172.218606][T21098] loop5: p2 size 327680 extends beyond EOD, truncated [ 172.226107][T21098] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.241879][T21126] loop3: detected capacity change from 0 to 1 [ 172.284801][T21098] loop5: detected capacity change from 0 to 28799 [ 172.316504][T21126] loop3: p2 p4 [ 172.320127][T21126] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.327685][T21098] loop5: p2 p4 [ 172.331979][T21126] loop3: p4 size 2097152 extends beyond EOD, truncated [ 172.336758][T21098] loop5: p2 size 327680 extends beyond EOD, truncated [ 172.359363][T21098] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.368596][T21169] loop1: detected capacity change from 0 to 229376 [ 172.375450][T21126] loop3: detected capacity change from 0 to 1 01:34:10 executing program 3: syz_read_part_table(0x63, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 5: syz_read_part_table(0x1000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x4ad, 0xd56}) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f000000ac00)=ANY=[@ANYBLOB="76030000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085f6c259000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ec531ec813a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000645e0040ee84b3710311c8de8ad0f00106b1a86ecc82cbf494240a342c90f8dc436c07bee47659454eb4e5776f8fb0b57d705a193d60b7d166a627289d840ba7b00c0a8b20e0062d2dab6e4c2aaef748f8cf0f1c0c44b476125d5e2558c7a3278a45339c97034ad2190d19caf14a9dae5dd805d53872ac67966a3a5aae96c1f070fa9084d2372f9a6f2200bf0a0138ecc4c4baffaa0f6b4d2bb46a14bb5a543a045d6187de59e6751df3d15a3a9e680751a054ee47b9113820851182b714c0260e1225c6559178c4cff927cf7df9a7bb305b7bd078e629d90c5206b832db82a8f0543084a98121d077f41289bb83542cd72bf5ae1fad247b0cea0723145a974313bd512aebb4d18ce38e814d3bd14c60d559831a9fd09747d93d972c963e0653156047fc266666d57b31a2d1a6442eeea4b4781cd099768a385ac61d925e29659c907bd781db71ae95fdeb01456bae723ee0e85afcc8f720828e077f209645ced9b6ba8c51dc9d12a53a1c69b8b4c51ca40ae218354398905b1ac23ed9bb0c0e9c9a48cd6b0e37aad5b124c10615390ef4863deede5a8bbdeb3ad1d249fa500b8aa7dc6b226048b87abc28bbd72dc619b44db10a3116be6ed91ae80473a644f9dc"]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x25, 0x8, 0xffff, 0x6a, @private0, @mcast1, 0x700, 0x40, 0xffff8000, 0x1}}) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 172.404889][T21126] loop3: p2 p4 [ 172.408459][T21126] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.416002][T21126] loop3: p4 size 2097152 extends beyond EOD, truncated [ 172.434315][ T1028] loop1: p2 p4 [ 172.438033][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.448933][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 172.461366][T21169] loop1: p2 p4 [ 172.465150][T21169] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.472819][T21169] loop1: p4 size 2097152 extends beyond EOD, truncated [ 172.521402][T21207] loop3: detected capacity change from 0 to 1 [ 172.527569][T21169] loop1: detected capacity change from 0 to 229376 [ 172.535723][T21219] loop5: detected capacity change from 0 to 32768 [ 172.574950][T21219] loop5: p2 p4 [ 172.575173][T21169] loop1: p2 p4 [ 172.578652][T21219] loop5: p2 size 327680 extends beyond EOD, truncated [ 172.582155][ T1028] loop3: p2 p4 [ 172.591110][T21169] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.592427][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.600355][T21219] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.606864][T21169] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:10 executing program 1: syz_read_part_table(0x8000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 2: syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:10 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) io_uring_enter(r0, 0x2338, 0xef04, 0x1, &(0x7f0000000040)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x3, 0x0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x20180, 0x0) io_uring_enter(r3, 0x5e50, 0xf48f, 0x3, &(0x7f0000000140)={[0x7]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) [ 172.619003][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 172.628217][T21207] loop3: p2 p4 [ 172.631759][T21207] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.639386][T21207] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:10 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 172.687873][T21219] loop5: detected capacity change from 0 to 32768 [ 172.695511][T21207] loop3: detected capacity change from 0 to 1 [ 172.724827][T21219] loop5: p2 p4 [ 172.728657][T21219] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:10 executing program 5: syz_read_part_table(0x2000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 172.741217][T21219] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.749559][ T1028] loop3: p2 p4 [ 172.753110][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.760644][T21270] loop1: detected capacity change from 0 to 262144 [ 172.775267][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:10 executing program 3: syz_read_part_table(0x68, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r3, 0x388d2000) [ 172.790451][T21207] loop3: p2 p4 [ 172.794153][T21207] loop3: p2 size 327680 extends beyond EOD, truncated [ 172.804888][T21270] loop1: p2 p4 [ 172.810588][T21270] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.818946][T21270] loop1: p4 size 2097152 extends beyond EOD, truncated [ 172.819663][T21207] loop3: p4 size 2097152 extends beyond EOD, truncated [ 172.865236][T21311] loop5: detected capacity change from 0 to 65536 [ 172.879253][T21270] loop1: detected capacity change from 0 to 262144 01:34:10 executing program 2: r0 = syz_io_uring_setup(0x2613, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f000032d000/0x1000)=nil, &(0x7f00007b3000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 1: syz_read_part_table(0x9000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x2e3e, &(0x7f0000000100)={0x0, 0x3c28, 0x0, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000340000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd_index=0x8, 0xd444, 0x5, 0x4, 0x8, 0x1, {0x1}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r0, r6, r3, r7], 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 172.920199][T21270] loop1: p2 p4 [ 172.923101][T21329] loop3: detected capacity change from 0 to 1 [ 172.923879][T21270] loop1: p2 size 327680 extends beyond EOD, truncated [ 172.932018][ T1028] loop5: p2 p4 [ 172.938985][T21270] loop1: p4 size 2097152 extends beyond EOD, truncated [ 172.941026][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 172.955073][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.963710][T21311] loop5: p2 p4 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x6e83, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 172.967434][T21311] loop5: p2 size 327680 extends beyond EOD, truncated [ 172.974618][T21311] loop5: p4 size 2097152 extends beyond EOD, truncated [ 172.981911][T21329] loop3: p2 p4 [ 172.999666][T21329] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.016558][ T1028] loop5: p2 p4 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x6e83, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:10 executing program 2: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) [ 173.023890][T21329] loop3: p4 size 2097152 extends beyond EOD, truncated [ 173.034131][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.045027][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.058034][T21366] loop1: detected capacity change from 0 to 264192 01:34:10 executing program 5: syz_read_part_table(0x2040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:10 executing program 0: r0 = syz_io_uring_setup(0x6e83, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 173.078000][T21329] loop3: detected capacity change from 0 to 1 [ 173.134312][T21366] loop1: p2 p4 [ 173.138115][T21329] loop3: p2 p4 [ 173.142145][T21366] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.146749][T21329] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.160547][T21366] loop1: p4 size 2097152 extends beyond EOD, truncated [ 173.170961][ T1028] loop1: p2 p4 [ 173.173149][T21329] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:11 executing program 3: syz_read_part_table(0x6c, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 2: setresuid(0xee00, 0xee00, 0x0) setresuid(0x0, 0x0, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x4916, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') shutdown(r3, 0x1) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 173.174500][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.188256][T21397] loop5: detected capacity change from 0 to 66048 [ 173.193918][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:11 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) [ 173.235967][T21397] loop5: p2 p4 [ 173.239571][T21397] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.254119][T21397] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.254985][T21366] loop1: detected capacity change from 0 to 264192 01:34:11 executing program 1: syz_read_part_table(0xa000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e82, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x88012, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002001, 0x0, {0x3}}, 0x3) 01:34:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0xd0}}, 0x0) [ 173.295091][T21366] loop1: p2 p4 [ 173.298862][T21366] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.314795][T21366] loop1: p4 size 2097152 extends beyond EOD, truncated [ 173.322048][T21397] loop5: detected capacity change from 0 to 66048 [ 173.327048][T21436] loop3: detected capacity change from 0 to 1 01:34:11 executing program 2: open(0x0, 0x10f0c2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf04, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x5460, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x940f) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 173.375593][T21436] loop3: p2 p4 [ 173.379190][T21436] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.393780][ T1028] loop5: p2 p4 [ 173.397553][T21436] loop3: p4 size 2097152 extends beyond EOD, truncated [ 173.407645][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.425875][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.453721][T21397] loop5: p2 p4 [ 173.457397][T21397] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:11 executing program 5: syz_read_part_table(0x3000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x20010, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') r5 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mremap(&(0x7f00005f5000/0x5000)=nil, 0x5000, 0x2000, 0x7, &(0x7f0000086000/0x2000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r10, 0x0) preadv(r10, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140)='TIPC\x00', r9) sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x400c0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r11, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x15, 0x10080, 0x12345, {0x0, r8}}, 0x81) [ 173.492644][T21476] loop1: detected capacity change from 0 to 264192 [ 173.494705][T21436] loop3: detected capacity change from 0 to 1 [ 173.506139][T21397] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.534982][T21476] loop1: p2 p4 [ 173.538924][T21476] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.547992][T21436] loop3: p2 p4 [ 173.551571][T21436] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.564143][T21476] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:11 executing program 3: syz_read_part_table(0x74, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:11 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) madvise(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x12) munmap(&(0x7f0000006000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x42eb, &(0x7f0000000100)={0x0, 0x7a64, 0x20, 0x2, 0x265, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x69b1, &(0x7f0000000240)={0x0, 0x7132, 0x1, 0x1, 0xf09, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r5, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)={0x77359400}, 0x1, 0x1}, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x204400, 0x0) io_uring_enter(r6, 0x43d1, 0xbdc6, 0x3, &(0x7f0000000440)={[0x87ea]}, 0x8) syz_io_uring_setup(0x377, &(0x7f0000000480)={0x0, 0x5855, 0x8, 0x1, 0x73, 0x0, r4}, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x156f, 0xc6d8, 0x1, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='coredump_filter\x00') syz_io_uring_setup(0xfb9, &(0x7f00000005c0)={0x0, 0x6768, 0x15, 0x2, 0x329, 0x0, r7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x6, 0x601) dup3(r8, r9, 0x80000) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 173.580235][T21436] loop3: p4 size 2097152 extends beyond EOD, truncated [ 173.591535][ T1028] loop1: p2 p4 [ 173.595764][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.603282][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 173.611452][T21504] loop5: detected capacity change from 0 to 98304 [ 173.645720][T21504] loop5: p2 p4 [ 173.655266][T21504] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.662272][T21476] loop1: detected capacity change from 0 to 264192 [ 173.671118][T21504] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.685980][ T1028] loop5: p2 p4 01:34:11 executing program 1: syz_read_part_table(0xb000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x50000000, &(0x7f0000000140)="d5d1279d8f1e5e9da9b0b45cb44a6130fc93865d928bff7d895f65371eb2adb25f1c81b1b5872d0a54940a7a475dfeaaa03603275d12c2c6c9d8d842ec415a6a600ecc5d5410a40a006a93f663c9845bcf03e0c8ee0e400ebf7de41476c9af85eea2", &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="3dbb41957c61923df4b3e79eb84dbf0995344be2d9e0675ae5dcced8fbd478e2708494ae53e51ce88a9bbe2adc246d3f77") r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) io_uring_enter(r3, 0x4608, 0xb92c, 0x1, &(0x7f0000000100)={[0x449d]}, 0x8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 173.689615][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.694846][T21476] loop1: p2 p4 [ 173.702676][T21476] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.710103][T21476] loop1: p4 size 2097152 extends beyond EOD, truncated [ 173.721098][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.724406][T21540] loop3: detected capacity change from 0 to 1 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 173.770280][T21540] loop3: p2 p4 [ 173.773814][T21540] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.781494][T21540] loop3: p4 size 2097152 extends beyond EOD, truncated [ 173.790022][T21504] loop5: detected capacity change from 0 to 98304 [ 173.847561][ T1028] loop5: p2 p4 [ 173.851101][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.858051][T21575] loop1: detected capacity change from 0 to 264192 [ 173.875772][T21540] loop3: detected capacity change from 0 to 1 [ 173.882105][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.891724][T21504] loop5: p2 p4 01:34:11 executing program 5: syz_read_part_table(0x4000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x920, 0x6000}, 0x5) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:11 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0xee00, 0xee00, 0x0) 01:34:11 executing program 3: syz_read_part_table(0x7a, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 173.895536][T21504] loop5: p2 size 327680 extends beyond EOD, truncated [ 173.902781][T21504] loop5: p4 size 2097152 extends beyond EOD, truncated [ 173.910441][T21540] loop3: p2 p4 [ 173.910492][T21575] loop1: p2 p4 [ 173.913992][T21540] loop3: p2 size 327680 extends beyond EOD, truncated [ 173.918724][T21575] loop1: p2 size 327680 extends beyond EOD, truncated [ 173.932196][T21575] loop1: p4 size 2097152 extends beyond EOD, truncated [ 173.939465][T21540] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:11 executing program 2: setresuid(0xffffffffffffffff, 0x0, 0xee01) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 174.012846][T21575] loop1: detected capacity change from 0 to 264192 [ 174.055146][ T1028] loop1: p2 p4 [ 174.059551][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.072734][T21641] loop3: detected capacity change from 0 to 1 [ 174.076847][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.085203][T21643] loop5: detected capacity change from 0 to 131072 [ 174.093132][T21575] loop1: p2 p4 [ 174.096703][T21575] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.105577][T21641] loop3: p2 p4 [ 174.110100][T21641] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.118223][T21575] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.122838][T21641] loop3: p4 size 2097152 extends beyond EOD, truncated [ 174.132277][T21643] loop5: p2 p4 [ 174.135942][T21643] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.143681][T21643] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:11 executing program 1: syz_read_part_table(0xc000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:11 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000280)='./file0\x00', 0x400, 0x400, 0x0, {0x0, r7}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/84, 0x54}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000280)}, {&(0x7f0000000400)=""/172, 0xac}], 0x7, &(0x7f0000000540)=""/169, 0xa9}, 0x0, 0x1, 0x1}, 0xff) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:11 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 174.156194][ T1028] loop5: p2 p4 [ 174.159804][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.167486][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.190666][T21641] loop3: detected capacity change from 0 to 1 [ 174.232785][T21643] loop5: detected capacity change from 0 to 131072 [ 174.245774][T21641] loop3: p2 p4 [ 174.249337][T21641] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.255607][T21703] loop1: detected capacity change from 0 to 264192 [ 174.268505][T21641] loop3: p4 size 2097152 extends beyond EOD, truncated [ 174.276415][T21643] loop5: p2 p4 01:34:12 executing program 5: syz_read_part_table(0x5000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x1) 01:34:12 executing program 3: syz_read_part_table(0x90, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 174.279956][T21643] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.288569][T21643] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.305849][T21703] loop1: p2 p4 [ 174.309919][T21703] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.317816][T21703] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.325835][ T1028] loop5: p2 p4 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 174.329519][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.340425][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:12 executing program 2: add_key$user(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="f0", 0x1, 0xfffffffffffffffb) keyctl$link(0x8, r0, 0xfffffffffffffffb) [ 174.396486][T21703] loop1: detected capacity change from 0 to 264192 [ 174.397203][T21736] loop5: detected capacity change from 0 to 163840 [ 174.426912][T21757] loop3: detected capacity change from 0 to 1 [ 174.435398][T21703] loop1: p2 p4 [ 174.438986][T21703] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:12 executing program 1: syz_read_part_table(0xd000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 174.444871][ T1028] loop5: p2 p4 [ 174.449501][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.456119][T21703] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.456628][T21757] loop3: p2 p4 [ 174.471784][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.477104][T21757] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.486543][T21757] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="7552f389b9e7e22083bffbf84328f5339d75b651516d08c5491f1b8d8de86f1d53ef8d8b7a001f8785ffcdaf9efed1535e28794c5e34c9ea838d961b21f312ead5ecee61cd6050b2bde2365396a265a8fb10e5022db6c13e7c8289df8c45c1a772cd56", 0x63, 0x40000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x1, 0x3, 0x4, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="c4c111bf7f338dc1bb397584ad07fc20c3ad05aa20f80cef12e0e179c15279fd34d8588ece438d165f2efcc3e4e839d1d0a69778faa35fb51b710902b8d222dfa1973222090e4c0ff4e1a0eef401d15ba6ad43eff0761219b0d774b6b543346477", 0x61}, {&(0x7f0000000040)}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="f94b26389185ec6d82f5a9f5d3f59cbc39ba1b144e961b21f7eefe3b782184cc6d1acf3edbc199a76c20630200d645c298a928b7c79373bb931f2a0a95fc694b46a42ceb8fb2d5273ed6b8677eb1c1326473683ceae7", 0x56}, {&(0x7f00000003c0)="bf371d7cda2aefa030b5f36669f12bb41f4db65c397944aadfe3fdfdfbc6ebb834782827b6c6c18a6f19736f668eced23e8ab549d34e5f9ecc15cfa6879567b060ef81aeba322c334d23297990935d086018e2bb5c08c9477ffa644a1a0b134caa3b6cffc2cd6065", 0x68}, {&(0x7f0000000440)="0bc9c34454c638cf98b0331515aef55071d552697f02db5888cc2f5e11087b01fcdf48a8c640de3e956830424c9e326d9e9a6eb0", 0x34}, {&(0x7f0000000480)="9cdf32bcbe1f61edb94ca0e2b1e9ab9cd75e53bef8672d7771e5db187bd18db538b382f01e817b2ed39b0c994b487eb3d7596e04", 0x34}], 0x4, &(0x7f0000000500)=[{0x68, 0xfadde2c74069a375, 0x1, "f360ffaa7ac9ab77c28bb6e38853c7804b4dbab94e6a760aab40620faef30c560b3d3c3283faed3bb796cede3a139545f52689246a1a3881fd85121fc60922a24b9a46a4fa92a0df334f5c8d1edd73380cb8f4774b"}], 0x68}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="1493e6fd839f5cd8e458f7a35c441c99d1c9c6344e53c68a9c2ca8", 0x1b}, {&(0x7f00000005c0)="6d4d32b584d12bb36e70381f927893361aa0d3e2d2d59bb4d43024e35eac74dcedf8101e25e707", 0x27}], 0x2, &(0x7f0000000640)=[{0x68, 0x29, 0xfffffffe, "e71bb377acc2be88dcc5bef00727face9ffacedeb4ef549a52314ca018d113c523aebf14357f72dbebee24f870802d38b3368c5082dc506749428b72917575ed6a54248cf2d7549d0e75323ebc5556cbc3"}, {0x78, 0xa, 0x275, "16b5eeaf2e2358ce23c34a70943790a24606df86fcfbf718c358b9a4c702f3c876f64d98498357d98ebcdc758bb6cac194a3f4a9f6f91ba4f13382c909f8e80e32efccb2593453efe37cb8287270a157ff98a3373e49cb2184f1ccfa64ae45d1c04c4c95e28a8b24"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000740)}, {&(0x7f0000000780)="ba51200e8ece53216c806be10aa4f7184f1b1d90735a22d3d54c0af98c62755fa03d56cd1302abbf379bd46ebb55b46c2283a42922de53fd65d799ffa24edfabf9e5e7026c581bf86740dc8afc02982634e9b8e46d3d60edc20d7fc4e67b20793bbba6e7b4b168", 0x67}, {&(0x7f0000000800)="fcd0636aa16530d1a0d81e94f5f19351cd753784839dfb52559aedbddb05fd3395602cfc7c5b9264cb58b6dbfa815520ec8ed145eb8878a3a7fbce050ab7ce6021cfe8f58809737d516cd71472ea500ef2574af21249f1252133551da2220d70b4cefabb071d7c64bb4519a7177e8eb85b1efd58e8b8adb978291bc00ad36ccf7fa9bebd5c104e031942ea892e3133e4d9516feb810344473ad19a215902bf6c9f2c37350267d1d58aa20b14e172e776a20e2ca5eb9b13e2", 0xb8}, {&(0x7f00000008c0)="c2b7b0f1b2c043054556ecaa4fd44cc7591dbf531d98570d182d98c51a26016e3e7725c62b0ce85268d87bd7a20ac52adaa54eaeec12083d6a72d045c6614b1b87dd34cf94e31b78baac445d99681ac3a1a9796b5ca0032431c00e3ab36ce9c46b9add09e438e928ae31455c832f1a58ddc403ffccd28f2f0ab16cb02cb6fca557f4cb941a449a4ee57b6bfa548e9520c6768ae40713585b3878655adac794f84aa5e8603d78467bd6e5e99e8f33966594d9f778d833800909af387b3680288e804404ce", 0xc4}, {&(0x7f00000009c0)="4c656f9da65de79b82e9e3cd1ddc64b739600362f0d4001539024c86ead7acdc4537617751dc90be2873b016de34f856f6f9c9a65b7acb83bdaf0614f5b1809bf73ad7db68c63bf050b3a53368192530e45d44ef90e28e1d18e8de0f8c4e81479cdfd97ae55afdb18c92c3d02ead6d1b6195cf92cdf8b099937dfb12ce19ce1dac3583c2eb6357d5a63d5bb381d98e6f7eee194c82b3677b1d6f61e1143fca5c58d89de291dfdc8fc71869ffb4a2e4da37075a2a2b44869c7374d62c43dc57cf92c830e5566811233a0544b7d814de2a166e5eb726a03c43468913ad43e0d777c3fc9ea836", 0xe5}, {&(0x7f0000000ac0)="29ed3c39392db2b0caff74e03cf42920544199d62b0e39607d8564419c468f360489019925bacc272b38ede8404e59b5a08ca1b12e3fab4cadc16a77e04241d829aced9c94dc2ef6ce5881539d720fe5dbca95bd869303f211fe16460a16c0e52bd52d95cc51d07df4dff38594e0ef57b05b861103e8c2e3ee416d92f3aa2478a6461911f4659ff1331ee21dc11f2b97d3e694833dcdd9a55164fda168589abcae74f0e3887028fbc298d196a4a7601b975ded4c66421d93b5d5dac49c56002fd53b2eb4fead97d874867163fdb8e04bce3f3d302bc08b37430f8332cc3609b07618c28419", 0xe5}, {&(0x7f0000000bc0)="39049876acb7b42dab183a134cbc3057e5c2b3bc518fbaffe5f0027e09e4e4fca9830bd95ba3e47851c3ca451d7117da5ffb45d0646b0f82fd184499a3fe9e696a2ef2146e5343348df95596b369551b0ca7a3e73ccee3797c161786b8429707852526c451a7d63922cf944dd90d22aacdb44120e2d0087579b5c20e95ba130dfbc137927c8b3f4e666fdafcd222361ce3637d9a", 0x94}, {&(0x7f0000000c80)="72409329a4ee679ffc44f1a35e67f3bf5e7bf2cd03e9a041e529959633f951de530b83fc73b73624d09e1b0a581c34dc586cb488e594090c1f369a73395de098b1ce3c9155668b7201f0fac56ba72a731917b44aba0280f434b74d0056bdfa6a6dde92106cdd99dceccd13a2512a7dcf9c2e712a909ee87291cabcc7", 0x7c}, {&(0x7f0000000d00)="8d5a6a06cbbbedda2cae46ff0f3570b90ad86f46d117bed3403dd546659db83832ab90bbc37ee8024c4ee2b9267114ea0782f6d3458775facd30319b14487d80777d3ad2b02eab92946c8a6b5eca8878112a028fc35b6790b95a0424cd5dbf058dff265f08cd7b8bbeedaa41947e140cf15cb6138bed1dcf1a91936002d3d80bc244d86808ffb79f4a6254d14bbde83c311dffe24557e399b44cbdae6884a0a9cbe90a688f61e01896103dabe833a50937b91ea1408307bb2935cfb561156fdc1a072e9a4a5536658600ff2a1f071a4d37480c554e943e286f60435e8db815cba21a5f31c63e20a2712753996bc276e8923d5373154d3ab73e2d51cab40ba9c53a7e111f55b301c6e334299b536c2b3a1e24b8585231fd0a6ee18421c3ac8c70e8e0139dfbd0c456acb5c347aa6356998401ebceebee3f73398f5e65ebf3a71d9b7d9ab9585fdd598f0635c912c00031ad229674e5fdeadbea792f3d27af594378f61b050ecd3f4b8c62dd0ffd2901a37ddfc3f1a5263f92661de9ef12f8e9238eef75fbac2eecbb3885c0857571271c40503e2dfebc690cba5609f8b8888cccb6ad341668fd997aa03972e472ba2c77e2eeb99fb6696f03c263c47fcbca04ae7fb16ee1afd63d1bc824f70647dea1af2b807708961d786d8169637cc4038396bf78dc35f93cfbdd24b352e7bcf5acd5291d0c2c35afde62889abce9cd6514543c9dc050e6cd845e88dc485c23d03f861ea6339a04eabc0de61ace9cd4b14cc4eced6149aeb8bd700c5edc498c6ad6008900955e58fd50b88b6303c49d675dc0076293fb3bc9881b6006a301b7167177bacaefc549f6474fea59c3fd4eecc48d8c1829622fd3d7168a30783e739768641be73dec1ccda1808862a943adb662334f0e9b86708d288ce148d7106126e3f1a685c3bb822229b9ec6921d4cdf2f19e9a7a22ef5baa4ffd7844c268c341019ef7b93cf872cf8e53d5a55e404131bfba77094dc16d32f42df06da559fde0d6f60b35c4facfcda558ac5c85f9da20ea63f403e87f084dbcc2cfd63aaf39ad40b4b3be5a218ddcd6af2ae262ba6b5c9e77bf34869c8e15c77573c645a41c736e4b0e5b3e01d4ee88ad945792a97292ac598d4c407def3b4f430ee544eea3effe830df842afddece12dd14fbd6902a136781ae9315b9d78a0c2e0defc6e861450effe5bd5a8497581c649b1d1570c61dbabf5cbe945794bbc2b8414f417697a27e3b144707c942ddd45f80e513ceaff0851452f8538bde1234d364ba953a60350e6353add8775b001621b3faec20308447f6f403e1b1a5f7cb8c022333395ce249ec130ef07ec45853a76a782e9171d847a9512be4bc5b21a1bb6b3b45b6942d43c9a3afbf2e8acc55b4bda5db751e70465e581307129bb88ddde6ce1fb6b013c2ab33230e73c715a7718d9cff338c67af661e8d5c21f265777e99cc6d47498d4816578d33c05fd188ad93745116f2022eefd7c3ceed7120951d28b5dd9881342d7d90454d79a67a8d1ad726109f12786bdfbe92e3cebd8ca06e02336795fae775f952716670b7cdb295c9dc7cad49a688c8dbfacbc75cdd40aa3910ef4284be7f9522965ee2f3559a24552b0c9c8b53e13d0138d1f35519deaa4d458dea7c1ff9251da8ede360e9aafb0391047bb04c45749c8361850fdcb6169bf4165d97580fe495e06881162af6711841f8120595bb1b6eb921fdbc45b106befe6f5818082a062d2ffdb186632a27d60f76211cc76244b35c16b801038a6a322eabede35d8aaeaa93cb39452747547ff40afee5ca0d7a5d5218c918c6fd2bbda419235396571b09ee04791ad792d1c47dd080634524b8bb33a406ffa2b09f77e9143f145162d23c2770cbb7c6ab5ae578538fa727736dbc2845c24572a78a7e8219bb632db397c550abb18c288f5e943dea2d6fe2636941cc3a47cd3f14eefa241e43d43e676e7cbc080aafe7b6961363b8087d5a5754592a6552a7f7967888a4154b8c6394b0c13c26a0c167e6e39613e5a80dd391a7c83362b57d6d07a8eada8965b0bf3c2b21e717f8ed2c414133a164dc6b42076ca33a47fd4ce8d337b059b88fb483c0df52767264cb909541ebd2bd1f58ad2c7cfe70bbdbc3cb369ee27b39e6661b3ac5e28bc361b817354e651e5eec623b447eb29c45713110a34977b33d67d12fb620894dd0ed117c6e67a3ec459afb9b4fa846eeaa5f9abc82fe0d1a2464bdb70ec8686a522ed345577e35436e32af6aafcaf5433a1c7445a48218f53f039379c2a690ca9c1ce7fce435176dc5a6230283d2151182ae270397292b017523aaa7f8caf6858c8a2955dca8634b4b1046031e3f324ba9892b3504df4bf10c394c9ad7f7a9a6a40bdd25026d9e993337b3e8434343b4fae43d61d5f9270db9d08f73dcf4192ea41a732ff2d1755777c31c49780815edbe74d62dc68a6212e3f99aeae729f3022d4b52d71d2862bce643d3a5b0d2183479c78eaa3ae28769bd292f51d23a25dc541cb56ec63a2ff6e6fa22ab8fc7495400d33e7e3dc1327b7be634722fea6f2b1d6b9c2781cb9b6fd5430d9c3b14d9bb3b9d22d2731d5603446da315a16cd834a020b2c4e468fd833b413c2ffbc2247f1263326daf999ce13151802a095a5ec08c8f33cb9a148623f414cda0e41008b983b4d3d518a1e93091194c7a2d9dc0298a9d75b9d55b96fb91e868df60a3fe9a8c7c3ce9e55491777a6f61b8d55a56b307614fd68fea579f80a350b008841fff78f98e74bf80efb8549655678008a3ff76771cccc06a27012b19b2f2ed1eb043666159981efd05939b5c0173a7f4c42df85e6c8cb3e9ee1a2b6153e23f40545854c532e94f95cc880872b77856820e3ee53b3f758dd1066d11bb0cc0f99a6d9891d189cd07a114b95ca7a96ed6b1be615cedff8fcf6172a757d7384bdec324a7285a546f6f321543ef99c6ce7b9d9b4c20072dc8145ee013229d0acf929fdd941063fbf953d6d43769a16c66e5ee4de7d0da7a67bc04b7fbdd938cd4a8cbe6a431bd9fe71511d7b38bd54473c16d6de996a521323cbc8e2ecb8cb48c22748c6a79255a08b7e265cb604f9f77a7c90e50c96fc184582aa80faa29ca0183da9d90cf8bb6f468a8ef86a3241d1356a95ebc0c60e662a9d6eea55e77a8e949a51a269d9d8aa3e5eb7bac34d5c1bbbdd3944cdd9fc72640723840a3e15f1fb2ea407da71393616c0feaea4367fc2bd9e8e6f86421fa3556ee3effbfbc5afacbaa36f92312ad057eb4deb04da13ed9b502b901b314f18c9e8cf88c8c78e12176fcaf6cd6231bc60a218466a0e2c21f75d1c541e27b316197d1ff0b97c33f77a083c20503aea158aaabc8ad4c41fedcf9c87c31a0c5c2b22383ddcb219c4cfc3e3f325ecb1f48a838fe8023e20215bccf07e7041fcde511a2a071acf689618f989b18a976c977945f92cfc28c6ea255e8fab92c9b3bea4e61b565a11c9c7f9b39cc3820b3fbdd612df51bd9513a53d35be29b1a1003475118eecce39b60c4f1336f52d260d035ff0483078fbe9af1d67709cea4c41357500f8cd70d84adb5226fac7e20c90a79bc8ad1f9b2a015aa346a099d57eef6fa235bb3af6b9d941804bff9d86ff1f296a9c6369683961523db036f99ad703fef6d7f95b609ca00941bf875562f730cbd0079a42093e88dec89264b1a97cb32bfdfbff83bafc7f4d4f15fda3a2a17156480f76459f77e5f4b9609aec2a73033243f39a118ea584902e86767511e033a82da63484d2a62db0b23adec908f4cca9f0809bb95d80b1a5de47fe3bf0f6e643d5453c7f46146bd57dd1d33e738a094819bf34fb5f26f973e44f5c68ec98097254e2545ecdf427903658987b408fb2e638975d5e0e97cee0efc9f4286dcd7bfea6c62e09258b8efe4966e9148f977821272bb82b1c30c7327144af37437ca1e2c0f427548375d24255ceb6dfd37908a9ed1d732d193ec7a172e0f07aa5ce395eb52cc4b4a428faab77eae0ea5e4c0d8554080a4ebf50b4f0e6d802d96374afae3c548eb41faef9bcc41ef9cb233cf4a32fd82b1e4c48537adaf7366b8c1ab5ea41bef9ae27f17c420aeea46d2ae4c015abb6f366419b3c94a073030a7f5c9ed4892e40851568b8722c7fb2079142304b721676bc4c9a343fc72104d5966b25880a9399e1246bacd39d3b64525918a9fd5d52652c38c347634f860ef48fae741ed2c37cbecf2345e64281d72083f8f535958d1f3011e7b9f6531a4bbd67f2843d6ac780609c2eb829ace048646a6aabcd18d0ce49d98d21a6f8d31874abfb2ff2662158b554e31bec9001ef4100f73a46c9dc4b81654d3cccf6f19239eb1236dfbccc6e31c32de304d7310aa21ca502ae6f431992ee5b354abeade00e106b506d759c38824aa900d1575774ec25a5aa25ae3421fe8d69894ce2bee5dbd7b4e38f6bddf7c7494da3f7c07a910cea7b8a5820fdf8f0670132fc8e0a8b2b6c490e2bb10f205c9fa3ed7a45d66d9ee2835a94ab838aa122b671fa32b3d515fec10d01520c587ffbd579fdd22cd3ae524a962383091753dda4b8fce99ade06f3cb6ff10dd39805a31db700c3ea72386792e0b7116dd40a6454b4746db9f7e801b6a023dbc911f2d73e976b3132e354b1339b74be0581dde04ed49771ab1b385a50ad8013554f155d45639f77cb118bfeb44348b19a1cb7db4d56003cec6adbda09698f281e3a18768dde73248e6cd2c89df96f77192a7cc8910ed2cdcc59776f97a4a9759d4d3e1d7c5a7eb0a8c16fa5898d78992ec755b311db7116078eb868c7886a19d589a57360acde1a999eb855e05ed1acde0b110510ef16d8b1f536da23da3f84e4b19c1861aca9e76ff4e97879ce6233bc5de0ad5493d45347b0d013923196e83a37a9501c7235192b7ff851f2643dd97e2ba5c84f5053f509985fc90834d8e17db73e4559e6c3ea8e0709ebb4e11ba80039d9a0e0b25874c7f5f19506676ae652f3ea721cc6e1f41fc0882b3102133951865e8c0b7e5f8d36087ac0d7bca60857e6a5498d2171d3d6fe7451044e0ad3798188d8a5a8b22685bfa03a73d3160c2e59ecdb21349981130cedd4d03efe1c474f4c002f83318d704cd4c54cdb6337f77ac7ab81bbbbb21530c3e11b65bd7943e727cb3f225251c91c6c6bd47cf499f1e31b38cffe6b7305498fafa30d51476457eff3b02ca2d0add289cb8bbf1a9d1b10ce3ee814c747e35311dcddd149829e779ff84dab6b57c87e0555c8e644fe6b3fa789ad25eb2bc733d676bdb7e0cb0a38c513d96854f4fe0757ad3582d01ad04574f26b4610ce861582db536054d5da6d1e40775675ce76b97352f9df932bc85cd97d8e5bf82fe166d774f09a12ed70f415a0e417f995c935bf4a3832541f91d181340509518b60e45ac457fb40af1fabc34a028a0a0bb2dcf140c0f55bde6b7e25a690a66c9d98be27331b2ae584e138bd409095a15278fb0da475f31ac82d39268b979bb46471c5fd0760c19969b8d55b1580182c66ce4e8b148f9c7812c958446c2edf9a1e62551b21af1d2e8fb6a9bf698fd03a58dde123991932356f817dcd7cd12351313d809b27c5fb3634c898d8604cbbe293a15ac2a9818646e7d0dc941c52cb5c141838238fe3418072c6c1f3b9641f3bf2ba809c9efe28d1b654b0ac25bfb883ee93b75c370b062eaf25e14a85e2821fc2c3bdf0a5b592e43987778680ec213ee5c36031ed205b135088a80a2d1063af3fdfb27a69a687824c251944321319302414c286b2af750cd34a3699d08458fe5a23c0", 0x1000}], 0x9}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001dc0)="5ef01d30c6759813bbc8a622dc9d5b18451f0659e91a34928a542d9a85103877ccabd9077189c11301263fa6882c6b4e8cc6320af628ea6ceb85d5c406c9f04f5e1ee836f1ec0264429f90629a6ff1945131e915e10520de038f8ef4c52a5ce8a285e19d28514d", 0x67}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="4f7dbece7dfd0003b1c27d1245e80228322eae8f445a1b08", 0x18}, {&(0x7f0000001ec0)="643cdd0e3eff8acef7a8d43ea51d253085a3f80bd7da7156e2f9c3b7d092413b49303fab506f360d43a35d52628930c01d83e7f726a34abff41f3399aac90215d499cd77ff1582b0276fd32c58780663c8b5fad4645a7e8f3031b753fb8f7673b628372186528d85ea2d1e9a680e2f2b6b6fbb347f90dc18be29051795268470a59c00c24d05b72b869e6774a694eb52870dc185b50766b8f1c2ae625118fb9b6aff44c8ad72812d8d6c8ff1000653f6d34b5f72fba7bd3ccfc0cc3b5b8289cfc6b0dcd0", 0xc4}, {&(0x7f0000001fc0)="9b13a8217241fd9edf56836085be78da6fb9f8c28f827f9edf0636aab9da490b95a5e315763f7bca48736f2ae6f2e07cb7e5591598b46722877b1aa5a99b91ea0309a5c473476e3c475079cc798651c9e31263d7b4d8c3807b4ca653163966911b164b8893f1296f235fe24972e1c0f1b4dbc07581a493c6b05c4448e32e5a6be298546cef7c3e6a5dd77d1b54bee6e55f4543c19f896c903f8758993b54d7204083e996d68fee49f70f542760f33da73d3210ecd71d56a2e687a37ac1632fb5be63430b873657ea41604a5193a7878c2eb1068b89b28b574b84742e1c9805900ec21fd3111191f7ad", 0xe9}, {&(0x7f00000020c0)="cb4afa979a72bf80a921241b157d85fad57ecef2f4d5a045243ab5a5497c28a90cadc21d478c31d9e7e7d9115aa7fca53d231990208fc051aba9b612293334d12fca12c1d7407fea8700008ecb6fb215b3135d2e097d17640cc19fd30e0d50deac738ce14922f2dcb65f4ad37fe7e0dc66e977e51b14fc79b9b9f9a2830ada9b1840964e33a0f7e8b1e53e8e3ad953ba61c15f7ebf32d9c078326711d8f5444771155c09fb26", 0xa6}], 0x6, &(0x7f0000002200)=[{0xf0, 0x0, 0x101, "07198166bdaf9d16e37f647016c62d033947a06769d12a93274f0078cf294bebe18f634f604d16bf6a6f9ba165adefa9de97ddb650386cbedb2dc251a82a37b39e8533e301b9ef20017e4892761795c0407a72cfa08805aed64df52c1ed78082c79059e8b85050878438ba7a655be7b11ddbb7da4bbe254ae57debf71164eda4e5f4a5807cd32c986769825a4489d282e33d22a3c3a5527c2878fc7ea24b3f4e44d070eb8e53f76117ce24105ad099feca4953bf8e4a6e9abeea20e2625c28f4f243651db4fe2a2a0348669adfc4e79f13d78cfb3858d8a8bab5937562"}, {0x98, 0x1, 0x9, "01a9033aac413e166419477275df54ee8cf29beee303005f13a0eb65b7e39bbc5348652f12ab1d2bc741decd5a2a3d2ae9bc36959ed6a8e1434ec2da9291d8f48a7670c1e138c0de26ab561007e227fd7304b252c9fbd19087fe4a875af4bb95443cf68280378e897cf66025bc4f92f876789aba9d69975719a9d75102bdea7f1502fdade96ac5"}], 0x188}}], 0x5, 0x20000) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005500", @ANYBLOB], 0x28}}, 0x0) [ 174.496899][T21736] loop5: p2 p4 [ 174.500518][T21736] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.507912][T21736] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.531698][T21757] loop3: detected capacity change from 0 to 1 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x400, 0x2000}, 0x8001) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r5}, 0x0) 01:34:12 executing program 5: syz_read_part_table(0x6000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 174.556886][T21799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.560346][T21797] loop1: detected capacity change from 0 to 264192 [ 174.573164][T21757] loop3: p2 p4 [ 174.576765][T21757] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.584115][T21757] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:12 executing program 2: setresuid(0xee01, 0xee01, 0xee01) r0 = geteuid() setresuid(r0, 0x0, 0xffffffffffffffff) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 3: syz_read_part_table(0x204, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 1: syz_read_part_table(0xe000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x2c22, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x311000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r3, 0x1) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x8) 01:34:12 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffff8) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 174.615046][T21797] loop1: p2 p4 [ 174.618712][T21797] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.626735][T21797] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.642705][T21824] loop5: detected capacity change from 0 to 196608 01:34:12 executing program 2: clock_gettime(0x0, 0x0) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) [ 174.735933][ T1028] loop5: p2 p4 [ 174.744254][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.755584][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.773445][T21824] loop5: p2 p4 [ 174.777139][T21824] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x43bd, &(0x7f0000000100)={0x0, 0xb01a, 0x1, 0x0, 0x1c8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x1e058000) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) [ 174.784026][T21857] loop3: detected capacity change from 0 to 1 [ 174.785392][T21824] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.790203][T21854] loop1: detected capacity change from 0 to 264192 [ 174.824948][T21854] loop1: p2 p4 [ 174.828568][T21854] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.841974][T21854] loop1: p4 size 2097152 extends beyond EOD, truncated [ 174.851083][T21857] loop3: p2 p4 [ 174.854730][T21857] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.861828][T21824] loop5: detected capacity change from 0 to 196608 [ 174.869532][T21857] loop3: p4 size 2097152 extends beyond EOD, truncated [ 174.894817][ T1028] loop5: p2 p4 [ 174.898425][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.906727][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.917768][T21857] loop3: detected capacity change from 0 to 1 [ 174.924043][T21854] loop1: detected capacity change from 0 to 264192 [ 174.935618][T21824] loop5: p2 p4 01:34:12 executing program 5: syz_read_part_table(0x6040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0xe2607000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x7, 0x1, {0x0, 0x0, r2}}, 0xfffffffc) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 174.939261][T21824] loop5: p2 size 327680 extends beyond EOD, truncated [ 174.953539][T21824] loop5: p4 size 2097152 extends beyond EOD, truncated [ 174.960913][T21854] loop1: p2 p4 [ 174.964650][T21854] loop1: p2 size 327680 extends beyond EOD, truncated [ 174.971941][T21857] loop3: p2 p4 [ 174.975888][T21857] loop3: p2 size 327680 extends beyond EOD, truncated [ 174.982246][T21854] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:12 executing program 3: syz_read_part_table(0x300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 1: syz_read_part_table(0xf000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:12 executing program 2: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=':', 0x1, 0xfffffffffffffffb) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x1a) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x324, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = io_uring_setup(0xe05, &(0x7f0000000100)={0x0, 0x7804, 0x0, 0x1, 0x205}) io_uring_enter(r3, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 174.986630][T21857] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) 01:34:12 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:12 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x10000, 0x1, 0x0, 0x3ffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1394, &(0x7f0000000100)={0x0, 0x77a4, 0x1, 0x1, 0x36f, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 175.110307][T21949] loop5: detected capacity change from 0 to 197120 [ 175.201571][ T1028] loop5: p2 p4 [ 175.205230][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.212103][T21973] loop1: detected capacity change from 0 to 264192 [ 175.218723][T21974] loop3: detected capacity change from 0 to 1 [ 175.225466][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.233638][T21949] loop5: p2 p4 [ 175.237215][T21949] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.250026][T21949] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.275229][T21974] loop3: p2 p4 [ 175.278761][T21973] loop1: p2 p4 [ 175.278811][T21974] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.282918][T21973] loop1: p2 size 327680 extends beyond EOD, truncated [ 175.293329][T21974] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.303190][T21973] loop1: p4 size 2097152 extends beyond EOD, truncated [ 175.311664][ T1028] loop3: p2 p4 [ 175.317114][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.317383][T21949] loop5: detected capacity change from 0 to 197120 [ 175.324395][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.340214][T21973] loop1: detected capacity change from 0 to 264192 [ 175.347072][T21949] loop5: p2 p4 01:34:13 executing program 5: syz_read_part_table(0x7000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x8}, {}], 0x2, &(0x7f00000002c0)) 01:34:13 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 175.350571][T21949] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.357737][T21949] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.370766][T21974] loop3: detected capacity change from 0 to 1 [ 175.374872][T21973] loop1: p2 p4 [ 175.380837][T21973] loop1: p2 size 327680 extends beyond EOD, truncated [ 175.388225][T21973] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:13 executing program 3: syz_read_part_table(0x402, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)=0x200) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:13 executing program 1: syz_read_part_table(0x10000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 2: select(0x6e, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xea60}) 01:34:13 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 175.405029][ T1028] loop3: p2 p4 [ 175.408602][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.431357][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.447868][T21974] loop3: p2 p4 [ 175.451500][T21974] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.459085][T22054] loop5: detected capacity change from 0 to 229376 [ 175.466456][T21974] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:13 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x10, 0x400, 0x0, {0x0, r8}}, 0x9) 01:34:13 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) [ 175.514664][T22054] loop5: p2 p4 [ 175.518257][T22054] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.534355][T22054] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.550790][T22078] loop1: detected capacity change from 0 to 264192 01:34:13 executing program 0: syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:13 executing program 2: setresuid(0xee00, 0x0, 0x0) [ 175.565251][ T1028] loop5: p2 p4 [ 175.568846][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.577190][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.584935][T22078] loop1: p2 p4 [ 175.588651][T22078] loop1: p2 size 327680 extends beyond EOD, truncated [ 175.604994][T22078] loop1: p4 size 2097152 extends beyond EOD, truncated [ 175.612150][T22097] loop3: detected capacity change from 0 to 2 [ 175.657441][T22054] loop5: detected capacity change from 0 to 229376 [ 175.676081][T22097] loop3: p2 p4 [ 175.679717][T22097] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.687940][T22097] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.690935][T22078] loop1: detected capacity change from 0 to 264192 [ 175.701950][T22054] loop5: p2 p4 01:34:13 executing program 5: syz_read_part_table(0x8000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x2, 0x2, 0x0, 0x2, 0xfffffffe}, 0xfffffffffffffffd, 0x3}) r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:13 executing program 2: setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) [ 175.705560][T22054] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.714000][ T1028] loop3: p2 p4 [ 175.717744][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.718603][T22054] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.738858][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.774085][ T1028] loop5: p2 p4 [ 175.777789][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.798167][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.807631][T22097] loop3: detected capacity change from 0 to 2 01:34:13 executing program 3: syz_read_part_table(0x406, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 0: syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:13 executing program 1: syz_read_part_table(0x11000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x600000, 0x0) syz_io_uring_setup(0x4287, &(0x7f0000000100)={0x0, 0x4cb3, 0x10, 0x2, 0x246, 0x0, r3}, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000200)) 01:34:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) keyctl$chown(0x4, r1, 0x0, 0xee01) [ 175.846369][T22169] loop5: detected capacity change from 0 to 262144 [ 175.855224][T22097] loop3: p2 p4 [ 175.858810][T22097] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.866370][T22097] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.882534][T22169] loop5: p2 p4 01:34:13 executing program 0: syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3edb, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:13 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x118) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000380)="8dec36fbdd0b4a06e877be3983f16bdcda0eef59a9768a3c5b4bcc840d1c0ce68663be43ce60dd0ec5fdfcc52c1ab1cb1a96f66d29abca9d470eeab807eb35290cd26580", 0x44) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r5, 0x752a, 0xbd23, 0x2, &(0x7f0000000400)={[0x3]}, 0x8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_setup(0x1ee7, &(0x7f0000000200)={0x0, 0x1c9f, 0x20, 0x2, 0x396}, &(0x7f0000670000/0x3000)=nil, &(0x7f000025c000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r9, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd_index=0x5, 0xff, 0x0, 0x0, 0x3, 0x1, {0x3}}, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) preadv(r10, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r3, r0, r4, r6, r10], 0x5) 01:34:13 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) [ 175.893731][ T1028] loop3: p2 p4 [ 175.897870][T22169] loop5: p2 size 327680 extends beyond EOD, truncated [ 175.905105][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 175.915921][T22169] loop5: p4 size 2097152 extends beyond EOD, truncated [ 175.922988][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 175.930968][T22192] loop1: detected capacity change from 0 to 264192 01:34:13 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000240)=[{}, {0x0, 0x1}], 0x2, &(0x7f00000002c0)) [ 175.994878][T22192] loop1: p2 p4 [ 175.999139][T22192] loop1: p2 size 327680 extends beyond EOD, truncated [ 176.011270][T22192] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:13 executing program 5: syz_read_part_table(0x9000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:13 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:13 executing program 4: r0 = syz_io_uring_setup(0x23f4, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x4005789, &(0x7f0000000340)={0x0, 0x31ca, 0x20, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f00000003c0)) io_uring_enter(r0, 0x26d0, 0xe2b5, 0x1, &(0x7f0000000500)={[0x5]}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f1c, 0xb128, 0x2, &(0x7f00000005c0)={[0x2]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r5, &(0x7f0000000240)={0x80200, 0x14, 0xe}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xb08) r7 = openat2(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x400300, 0x22, 0x6}, 0x18) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, r6}}, 0xfff) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x402, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0xd302c01c4880cc94) r10 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r7, r3, r8, r0, r7, r9], 0x6, 0x0, 0x0, {0x0, r13}}, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x8e739000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/protocols\x00') io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 176.045748][T22169] loop5: detected capacity change from 0 to 262144 [ 176.082164][T22231] loop3: detected capacity change from 0 to 2 [ 176.122910][ T1028] loop3: p2 p4 [ 176.129083][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.136633][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.143825][T22192] loop1: detected capacity change from 0 to 264192 [ 176.152366][T22231] loop3: p2 p4 [ 176.155932][T22231] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.170078][T22231] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.184817][T22192] loop1: p2 p4 [ 176.187584][T22262] loop5: detected capacity change from 0 to 264192 [ 176.188455][T22192] loop1: p2 size 327680 extends beyond EOD, truncated [ 176.214067][T22192] loop1: p4 size 2097152 extends beyond EOD, truncated [ 176.224904][ T1028] loop5: p2 p4 [ 176.228532][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.236565][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 176.243684][T22231] loop3: detected capacity change from 0 to 2 [ 176.250654][T22262] loop5: p2 p4 [ 176.254200][T22262] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.261456][T22262] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 3: syz_read_part_table(0x480, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 01:34:14 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) 01:34:14 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000100)={0x0, 0xfa2d}) 01:34:14 executing program 1: syz_read_part_table(0x12000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 176.304825][T22231] loop3: p2 p4 [ 176.308442][T22231] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.317381][T22231] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.326334][T22262] loop5: detected capacity change from 0 to 264192 01:34:14 executing program 2: keyctl$update(0x2, 0x0, &(0x7f00000000c0)="1e7881d024e9ec5b2fb7633867c0f212d158e19c7e22fbcb4f935a32d2a9f99a8e071bf66d62fe4574d47c732415f12289d08708b9f1925c4c45af4f053a3b815b043e00699c6b54b711419fb9975f23835ac27a388ba98f3ca4e520abb03b07c55846e87b3adb13cb01e00a3dce2f0d38ce0f27dd90fda5e7ba392a1e5bd64487cab58f8aefcd658ba6b850991483dde6ddd0433b87197eb021149d1106decdeb88d939e23855777c827cf1b35849c2cb41c286cbfa50e32c2fa74e5c503178990861c758dd54060efe4ccff6c4e26552b8cbec7593c18ff2a7626f3ec846d546396cd76a441cca7ec384159c923dd9430b9b9ccc05df32b7a640093ea1ad126c4db4b0423ec63fe138", 0xfffffe61) [ 176.374894][ T1028] loop5: p2 p4 [ 176.378414][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.400823][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 01:34:14 executing program 0: r0 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:14 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x100, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000100)={0x0, 0xb14c, 0x8, 0x3, 0x31a, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x10000000) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x1, 0x400000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r5, &(0x7f0000000240), 0x0, 0x0, 0x40800}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/94, 0x5e}], 0x3, 0x7, 0x1000) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 176.422178][T22262] loop5: p2 p4 [ 176.434407][T22262] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.445520][T22262] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 5: syz_read_part_table(0x90e0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) [ 176.485578][T22316] loop1: detected capacity change from 0 to 264192 [ 176.495607][T22325] loop3: detected capacity change from 0 to 2 [ 176.536356][ T1028] loop1: p2 p4 [ 176.540110][T22325] loop3: p2 p4 [ 176.543616][T22325] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.548298][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 176.565024][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 176.573749][T22316] loop1: p2 p4 [ 176.577797][T22316] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:14 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x2, 0x0, &(0x7f0000051ff0)={0x2000000000003}, 0x0) [ 176.584109][T22325] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.597079][T22316] loop1: p4 size 2097152 extends beyond EOD, truncated [ 176.621167][T22358] loop5: detected capacity change from 0 to 264192 [ 176.643776][T22325] loop3: detected capacity change from 0 to 2 [ 176.655059][T22358] loop5: p2 p4 [ 176.658642][T22358] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.666988][T22358] loop5: p4 size 2097152 extends beyond EOD, truncated [ 176.704920][T22316] loop1: detected capacity change from 0 to 264192 [ 176.704947][T22325] loop3: p2 p4 [ 176.715735][T22325] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.723164][T22325] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.734722][T22316] loop1: p2 p4 [ 176.738322][T22316] loop1: p2 size 327680 extends beyond EOD, truncated [ 176.745798][T22358] loop5: detected capacity change from 0 to 264192 01:34:14 executing program 3: syz_read_part_table(0x4f5, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 01:34:14 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d70, &(0x7f0000000100)={0x0, 0x4df1, 0x2, 0x1, 0x2dd, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd_index=0x4, 0x5, 0x2, 0xa15, 0x8, 0x1, {0x3}}, 0x0) 01:34:14 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100)={0x0, 0x2710}) 01:34:14 executing program 1: syz_read_part_table(0x13000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 176.746673][T22316] loop1: p4 size 2097152 extends beyond EOD, truncated [ 176.759551][ T1028] loop3: p2 p4 [ 176.763200][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 176.771580][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 176.779229][T22358] loop5: p2 p4 [ 176.782819][T22358] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.802890][T22358] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) 01:34:14 executing program 5: syz_read_part_table(0xa000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:14 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 01:34:14 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@private2, 0x4e21, 0x3, 0x4e20, 0x401, 0xa, 0x80, 0xa0, 0x2f, 0x0, 0xee00}, {0x4, 0x101, 0xfffffffffffffff7, 0x6ea, 0x1418, 0x1, 0x100000001, 0x9}, {0x67e3, 0x8, 0x0, 0x3ff}, 0x4, 0x6e6bb7, 0x2, 0x1, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x2, 0x3, 0x0, 0x0, 0x8, 0x4}}, 0xe8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 176.852564][T22416] loop1: detected capacity change from 0 to 264192 [ 176.880764][ T1028] loop5: p2 p4 [ 176.885116][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 176.892524][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 0: socket(0xa, 0x0, 0xfdfffffd) [ 176.905250][T22416] loop1: p2 p4 [ 176.908819][T22416] loop1: p2 size 327680 extends beyond EOD, truncated [ 176.940900][T22416] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 01:34:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x2, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 176.960712][T22445] loop3: detected capacity change from 0 to 2 [ 176.980645][T22448] loop5: detected capacity change from 0 to 264192 [ 176.996481][ T1028] loop1: p2 p4 [ 177.005860][T22448] loop5: p2 p4 [ 177.012645][T22448] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.020293][T22445] loop3: p2 p4 [ 177.023845][T22445] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.032005][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 177.040488][T22445] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.049556][T22448] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.063992][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 177.107239][T22445] loop3: detected capacity change from 0 to 2 [ 177.135513][T22445] loop3: p2 p4 [ 177.136685][T22448] loop5: detected capacity change from 0 to 264192 [ 177.145239][T22445] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:14 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 01:34:14 executing program 2: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 01:34:14 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x2000000, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x3edb, 0x3, 0x0, 0x0, 0x0) 01:34:14 executing program 3: syz_read_part_table(0x500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:14 executing program 1: syz_read_part_table(0x20000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 177.153062][T22445] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.165839][ T1028] loop3: p2 p4 [ 177.169584][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.180993][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.184797][T22448] loop5: p2 p4 [ 177.192213][T22448] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:15 executing program 5: syz_read_part_table(0xa0e0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 177.200009][T22448] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x0}]) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 177.245280][ T1028] loop5: p2 p4 [ 177.248842][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.266861][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.279429][T22521] loop1: detected capacity change from 0 to 264192 01:34:15 executing program 2: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 177.297883][T22530] loop3: detected capacity change from 0 to 2 [ 177.314713][T22521] loop1: p2 p4 [ 177.318280][T22521] loop1: p2 size 327680 extends beyond EOD, truncated [ 177.333883][T22521] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:15 executing program 4: r0 = syz_io_uring_setup(0x7977, &(0x7f0000000080)={0x0, 0x100000, 0x4, 0x7, 0x14d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000400)}], 0x2, 0xfffffffd, 0xffffffff) r5 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r5, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x8, 0x3f, 0x80000000, 0x8, 0x2, 0x0, {0x2, r8}}, 0x10003) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x103081, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000380)={0x0, 'batadv0\x00', {0x1}, 0x8}) mlock(&(0x7f0000ee9000/0x1000)=nil, 0x1000) getsockopt$IP_SET_OP_GET_BYINDEX(r10, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000100)=0x28) io_uring_enter(r0, 0x6e91, 0x5f0f, 0x3, &(0x7f0000000140)={[0x1]}, 0x8) 01:34:15 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x9}, 0x1c) [ 177.355027][T22530] loop3: p2 p4 [ 177.362635][T22530] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.384057][T22530] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.397040][ T1028] loop3: p2 p4 01:34:15 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x9}, 0x1c) 01:34:15 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22e0, 0x70c8, 0x7, &(0x7f0000000040)={[0x100]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0xad9, 0x47a8, 0x3, &(0x7f0000000100)={[0x2]}, 0x8) [ 177.400726][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.412382][T22555] loop5: detected capacity change from 0 to 264192 [ 177.427110][T22521] loop1: detected capacity change from 0 to 264192 [ 177.434175][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) 01:34:15 executing program 3: syz_read_part_table(0x600, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 177.474728][T22555] loop5: p2 p4 [ 177.478460][T22521] loop1: p2 p4 [ 177.478531][T22555] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.482113][T22521] loop1: p2 size 327680 extends beyond EOD, truncated [ 177.497566][T22555] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:15 executing program 2: r0 = socket(0xa, 0x3, 0x3) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:34:15 executing program 1: syz_read_part_table(0x24000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 177.530250][ T1028] loop5: p2 p4 [ 177.533145][T22521] loop1: p4 size 2097152 extends beyond EOD, truncated [ 177.535431][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.564731][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.564831][T22604] loop3: detected capacity change from 0 to 3 [ 177.635482][ T1028] loop3: p2 p4 [ 177.639434][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.643176][T22555] loop5: detected capacity change from 0 to 264192 [ 177.653542][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.662611][T22604] loop3: p2 p4 [ 177.667544][T22604] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.677917][T22632] loop1: detected capacity change from 0 to 264192 01:34:15 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x30, r0, 0x0) syz_io_uring_setup(0x3143, &(0x7f0000000100)={0x0, 0x4d6c, 0x10, 0x3, 0x28f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0xc000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x2, 0x0, 0x200, 0x4, 0x1, {0x0, r6}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:15 executing program 5: syz_read_part_table(0xb000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 177.681182][T22604] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.689139][T22555] loop5: p2 p4 [ 177.697436][T22555] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.706394][T22555] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.715274][T22632] loop1: p2 p4 [ 177.718933][T22632] loop1: p2 size 327680 extends beyond EOD, truncated [ 177.728957][T22604] loop3: detected capacity change from 0 to 3 [ 177.734041][T22632] loop1: p4 size 2097152 extends beyond EOD, truncated [ 177.750770][ T1028] loop5: p2 p4 [ 177.754965][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.763446][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.774840][T22604] loop3: p2 p4 [ 177.781288][T22604] loop3: p2 size 327680 extends beyond EOD, truncated [ 177.789006][T22604] loop3: p4 size 2097152 extends beyond EOD, truncated [ 177.833000][T22663] loop5: detected capacity change from 0 to 264192 [ 177.855128][T22663] loop5: p2 p4 [ 177.858862][T22663] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.869781][T22663] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.880237][ T1028] loop5: p2 p4 [ 177.883866][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.891393][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 177.931504][T22663] loop5: detected capacity change from 0 to 264192 [ 177.974835][ T1028] loop5: p2 p4 [ 177.978487][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 177.986736][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 178.005411][T22663] loop5: p2 p4 [ 178.009018][T22663] loop5: p2 size 327680 extends beyond EOD, truncated [ 178.016837][T22663] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:18 executing program 0: setresuid(0xee00, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='q', 0x1, 0xfffffffffffffffc) 01:34:18 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) 01:34:18 executing program 1: syz_read_part_table(0x25000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 3: syz_read_part_table(0x604, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getgroups(0x2, &(0x7f0000001540)=[0xee01, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000001500)='system.posix_acl_access\x00', &(0x7f0000001580)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x9, 0xee01}], {0x4, 0x5}, [{0x8, 0x7, r1}], {0x10, 0x6}, {0x20, 0x1}}, 0x44, 0x2) r2 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) r4 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x3edb, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x5, 0x2, 0x0, 0xfff, 0x1, 0x1, {0x0, r7}}, 0x6) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000001380)=""/173, 0xad}, {&(0x7f0000001440)=""/161, 0xa1}], 0x4, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000040), 0x0, 0x4) 01:34:18 executing program 5: syz_read_part_table(0xb0e0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 2: r0 = fork() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 01:34:18 executing program 0: setresuid(0xee01, 0xee01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) 01:34:18 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x506a, &(0x7f0000000100)={0x0, 0x1a8f, 0x2, 0x0, 0x4001e1, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x2df1, &(0x7f0000000380)={0x0, 0x2826, 0x0, 0x1, 0x268, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23455}, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x3f, './file0\x00'}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 180.383233][T22750] loop3: detected capacity change from 0 to 3 [ 180.418745][T22753] loop1: detected capacity change from 0 to 264192 [ 180.418831][T22756] loop5: detected capacity change from 0 to 264192 [ 180.459965][T22756] loop5: p2 p4 [ 180.467040][T22750] loop3: p2 p4 [ 180.471237][T22753] loop1: p2 p4 [ 180.472012][T22756] loop5: p2 size 327680 extends beyond EOD, truncated [ 180.480621][T22750] loop3: p2 size 327680 extends beyond EOD, truncated [ 180.482492][T22756] loop5: p4 size 2097152 extends beyond EOD, truncated [ 180.489977][T22753] loop1: p2 size 327680 extends beyond EOD, truncated [ 180.529366][T22756] loop5: detected capacity change from 0 to 264192 [ 180.542388][T22750] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:18 executing program 0: setresuid(0xee01, 0xee01, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 01:34:18 executing program 0: ustat(0x9, &(0x7f0000000140)) 01:34:18 executing program 2: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 01:34:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) [ 180.572798][T22753] loop1: p4 size 2097152 extends beyond EOD, truncated [ 180.594226][T22756] loop5: p2 p4 [ 180.597891][T22756] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:18 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00040673746564162a2d7b00d1108bc14f72cf155af0c3337ad4882f36e57efcce1cca39eba3f500dc15d087839bcd873d90fc1a34048da4937876fb16ac11b15f83d312bb7b56fc3eeabff9422016dd033b5d7eaff98d3cb15380000912b6eab33e4746c3792e81f24c7814c3b30ffefabdb94748d1eafd08dfc020fff36e701204be42efb5f488a63115ef5f6969ff9879e1bc5d4b5349b3c9ad"], &(0x7f0000000140)='\'}$\x00', 0x4, 0x1) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 180.644652][T22756] loop5: p4 size 2097152 extends beyond EOD, truncated [ 180.675269][T22750] loop3: detected capacity change from 0 to 3 [ 180.717253][ T1028] loop3: p2 p4 [ 180.723245][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 180.739109][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 180.747086][T22753] loop1: detected capacity change from 0 to 264192 [ 180.755335][T22750] loop3: p2 p4 01:34:18 executing program 1: syz_read_part_table(0x3f000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 3: syz_read_part_table(0x700, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 5: syz_read_part_table(0xc000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:18 executing program 2: perf_event_open(&(0x7f0000001100)={0x0, 0xfffffffffffffd9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:18 executing program 0: add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 01:34:18 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2000, 0x3c, 0x14}, 0x18) io_uring_enter(r3, 0x30a2, 0xbce9, 0x2, &(0x7f0000000140)={[0x9]}, 0x8) [ 180.761619][T22750] loop3: p2 size 327680 extends beyond EOD, truncated [ 180.774405][T22750] loop3: p4 size 2097152 extends beyond EOD, truncated [ 180.789112][T22753] loop1: p2 p4 [ 180.793133][T22753] loop1: p2 size 327680 extends beyond EOD, truncated [ 180.804661][T22753] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) close(r0) 01:34:18 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) [ 180.873332][T22864] loop1: detected capacity change from 0 to 264192 [ 180.888892][T22868] loop5: detected capacity change from 0 to 264192 [ 180.914763][T22864] loop1: p2 p4 [ 180.919529][T22864] loop1: p2 size 327680 extends beyond EOD, truncated [ 180.923367][T22879] loop3: detected capacity change from 0 to 3 [ 180.927848][T22868] loop5: p2 p4 [ 180.951825][T22868] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) close(r0) 01:34:18 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0x10000000) fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r8 = syz_mount_image$iso9660(&(0x7f0000000680)='iso9660\x00', &(0x7f0000000a40)='./file0\x00', 0x4, 0x8, &(0x7f0000000b40)=[{&(0x7f0000000700)="5ac17a1f6098b87e24c366439f49d473d1e0d085e75eeda3366645a8f91c1bbe8ea7e990a2624ef7add220cf07e13377b82b0459474642bcd46494158929ca7d0dc2029eb3aede501bbc65f263757fb00f44ac166aca87e15a20d29842a4e18a7bc3f694d01835dd5711c239a47b08ee00e402ac07c548712244ea02dc4b3640eca65254a2c7cbe121a09a8710b43f2f68062ab49a96b95f6f910c94b4ad53", 0x9f, 0x2}, {&(0x7f00000007c0)="cca1f85e6cd0cdf30e905bb5c995b4d58249c1350c1e9e7a596f60626cf1627ea07a9f1c7c7e9f1113e3fb8ea1b0700d88295d896f7f259931dcdb84a6", 0x3d, 0x100000001}, {&(0x7f0000000800)="f7a50f867651fa12a0d28cfcde11f86a4b5f617266197909f57a1d96825608c493f0ef9f06b8ad560cdd0d9060115bd9720c3d85220c8b3f882fc881aae1fa7041bc7bbdfcb3bff39da579fd4de4b3cd9dc06c36a41aac7ccdcc9d9c20775c85c971cf91cec1390580a075839e4ab4851d15048a6418b77fac40d3e18db872c438b2ad3a07e900381cd273acd5c32ce81317d4bab7286681a9e98c3687186eb516b7411fc12475882fe64c30478e529ef732fdd3435375baae1d11ebb03d", 0xbe, 0x4}, {&(0x7f00000008c0)="3848ab33938128d1426d432e261d66f7bd763d4e1496b781", 0x18, 0x1440000000}, {&(0x7f0000000900)="05eb2476d640d516d7cae4b4f567579f94920961b961bcfb3e3d642a6983eab4ef3a83c90f2c1cc63f4477d71f21ecce4c3ff3717e06fd3cab070cbdd45e96d563fdcde42f03af90ecf3f658a7d65e881f9adb0fe93057a88ac5135e8f90d47e420e6d77a7e4073a7cd1cec9b19e385e1b7cfbe3b2df7af97233c6e6ba0c3aa07e910ad00b3e49ec03a911295248e1999d381e9946048e53cff188d56a349e9fde9ae30947d3616ce154713ce1f07aa39b6aca217ff59333c9468e8de6bb82aec8eca5609b1c2ef8dfe1344fe2c3c329370e3668edad81b61477e20d18f06adf", 0xe0, 0x550}, {&(0x7f0000000a00)="894d970ecd18c36870d939937c12be", 0xf, 0x3c12}, {&(0x7f0000000a40), 0x0, 0x1f}, {&(0x7f0000000a80)="31e5f7a8d0cd451670c8e6cb17f94cba201bf1364ef178f3c6f671a991403218526f25f1bbdb7c287bfde9b94ed4d38de9b7a1a3ce88b4a78a259cb604776c1f4150f95404786d00ab824ea200d6f1e64987ce95a7c4389858b07d41bba1efe236c4c2cf61ad49c645a3fee08b58451babb1d930a878daf4ab4ac559d4a52d003315301b9c278d271403dcddf24817e2009fed76aac97faba1de01600c77abe2f57426cea71c8eea4143a2285c126defa1e4", 0xb2, 0x1}], 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="636865636b3d72656c617865642c6d6f64653d3078303030303030303030303030303366662c6d61703d61636f726e2c646d6f64653d3078303030303030303030303030303030322c646d6f64653d3078303030303030303030303030303030352c6d6f64653d3078303030303030303006003030306666662c756e686964652c6d61703d6e6f726d616c2c696f636861727365743d64656661756c742c686173682c7375626a5f757365723d2c66736d616769633d3078303030303230303030303030303030302c61756469742c00"]) r9 = syz_open_dev$rtc(&(0x7f0000000d00)='/dev/rtc#\x00', 0x8, 0x200842) syz_io_uring_submit(0x0, r5, &(0x7f0000000d40)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0xffffffff, 0x2, 0x1, {0x0, 0x0, r9}}, 0xb36) r10 = getpid() r11 = fork() kcmp(r10, r11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x10c01, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r12, 0x0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="7cea691ba38390e85363b75be449b68e75a4640357ca1af4a5ad760e387f7903d40271f327d48f59b42caffb7b6cc5a24697cdc882ee80659f4300670693a08599dd65b832ccabc73c35ef809da4f8486946efeda1808d80ed58b43e24992d59bd8c489384f64492327bace1f750f051645f871dd25252053c5e65f8c74eef7f39be73894fb8dd15b92e988d2cb7b4fa286be994d6905d1e1814a72aa9c142d51c7d748b58ce2e0b994ba72a7c4e844e6b226520c6f5525a2863ec", 0xbb}], 0x1, &(0x7f0000000d80)=[{0x30, 0x29, 0x0, "5f5eb6a117d98165e478040c9557ff85b1710f8ec6af982bfb3a8c5ddfef80c9"}, {0x98, 0x10d, 0x8000, "14b491ef95a4aa95d68d9b4a46528f11610fb32dedb4d17eb9f4e324b153b6587bca3ee6571ae60495641848d098d53c72b87c90802094eb01f45c43d32f1153c5b4fb7fffcc8e4389ec30ea190149aba0508af6b23618b3b3060af8e52245724c56e2fd4689ea83f62599e0cb31bf9b5e8616b0df4b7f89d3649cc7255d1b179ca07885"}, {0xb8, 0x102, 0x7626, "43d8b518bbdc5f9ff6a1d5861bd2442298a7c16070bf665eebdcec7d75d8e2ed98722e6df3b1af3bab6f0247699307aa942a98c25ea13d25180a0c0317af5537e0acceb88a032d6181787385565964a3f7f1b3e8a5c651b37603e1edc6a44e2ff71f2bb18e0ab40873d395d5085aac5d51f29f7009587d6e3c4287025b77f76c1b26d97359b2c928817efde1c7ee16f529cb14dbf6e88138cf36da438565666db2047021499414eb"}, {0x80, 0x110, 0x0, "984a2480146a5ac24759435c304a0ed65d5929576761c173b960c13537d4ee9665c133b26e30f1731488a5d65ba0b99a592bd2a1126bc9fde322fcd99004338cbe17cbf98ca8660dba4d32aa7151cd27804cd1c899ab9bd4399e21e48228ec4340bcac5b62f87d5b5a0752c6"}, {0xa8, 0x10e, 0xffffffff, "7a8c9709792de8805690d6a4f0cfd34af0ee4188be8852bab2af034968c6746a063cb674b7353c1ec473f17cc074f725c30c2800009544f81bf7802b3564bb1d373fe233b7e18536940322e3a5a17bd9c54cf2b4677be847d8d941f5019054ed6b7bc46e4fb103625f5f86eb286369062b81b23ae254b557943a309a45d5b820d788c95f44000cf06829ff630190ed80bc"}], 0x2a8}, 0x0, 0x4000000}, 0x1005aa) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) [ 180.964282][T22864] loop1: p4 size 2097152 extends beyond EOD, truncated [ 180.964630][T22879] loop3: p2 p4 [ 180.978745][T22879] loop3: p2 size 327680 extends beyond EOD, truncated [ 180.990858][T22868] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 181.010995][T22879] loop3: p4 size 2097152 extends beyond EOD, truncated [ 181.030993][ T1028] loop5: p2 p4 [ 181.034882][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 181.058377][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) close(r0) [ 181.066846][T22864] loop1: detected capacity change from 0 to 264192 [ 181.068635][T22921] loop4: detected capacity change from 0 to 264192 [ 181.088014][T22879] loop3: detected capacity change from 0 to 3 [ 181.104651][T22864] loop1: p2 p4 [ 181.108245][T22864] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 01:34:18 executing program 3: syz_read_part_table(0x900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 181.121619][T22864] loop1: p4 size 2097152 extends beyond EOD, truncated [ 181.129101][T22879] loop3: p2 p4 [ 181.132894][T22879] loop3: p2 size 327680 extends beyond EOD, truncated [ 181.140858][T22868] loop5: detected capacity change from 0 to 264192 [ 181.140905][T22879] loop3: p4 size 2097152 extends beyond EOD, truncated [ 181.159858][T22943] loop4: detected capacity change from 0 to 264192 01:34:19 executing program 5: syz_read_part_table(0xc0e0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) close(r0) 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r8 = syz_io_uring_complete(r1) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x440000, 0x20) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) preadv(r10, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0xa, 0x0, 0x0, 0xa70, &(0x7f0000000140)=[r6, r7, r8, r9, r10], 0x5, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:19 executing program 1: syz_read_part_table(0x40000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 181.224864][T22868] loop5: p2 p4 [ 181.228848][T22868] loop5: p2 size 327680 extends beyond EOD, truncated [ 181.236765][ T1028] loop3: p2 p4 [ 181.240494][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 181.248521][T22868] loop5: p4 size 2097152 extends beyond EOD, truncated [ 181.256052][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 0: perf_event_open(&(0x7f0000001100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 181.357800][T22993] loop1: detected capacity change from 0 to 264192 [ 181.375328][T22999] loop3: detected capacity change from 0 to 4 [ 181.395968][T23008] loop5: detected capacity change from 0 to 264192 01:34:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) [ 181.406523][T22993] loop1: p2 p4 [ 181.410070][T22993] loop1: p2 size 327680 extends beyond EOD, truncated [ 181.425370][T22999] loop3: p2 p4 [ 181.429311][T22999] loop3: p2 size 327680 extends beyond EOD, truncated [ 181.444667][T23008] loop5: p2 p4 [ 181.447704][T22993] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x11, r0, 0x0) syz_io_uring_setup(0x8fb, &(0x7f0000000100)={0x0, 0x8efe, 0x8, 0x0, 0x256, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x1acd, &(0x7f0000000340)={0x0, 0xc97b, 0x20, 0x0, 0x307, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r7 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r10 = syz_open_dev$vcsu(&(0x7f00000004c0)='/dev/vcsu#\x00', 0x8, 0x10800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x8000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@version_u='version=9p2000.u'}, {@dfltuid={'dfltuid'}}, {@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0x7ef}}, {@version_u='version=9p2000.u'}, {@fscache='fscache'}], [{@seclabel='seclabel'}, {@measure='measure'}, {@measure='measure'}, {@uid_lt={'uid<', r12}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000200)=0x80, &(0x7f0000000240)=@xdp, 0x0, 0x80000, 0x0, {0x0, r13}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 181.448705][T23008] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:19 executing program 0: add_key(&(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0xffffffffffffff1a, 0xfffffffffffffffa) [ 181.487664][T22999] loop3: p4 size 2097152 extends beyond EOD, truncated [ 181.501059][T23008] loop5: p4 size 2097152 extends beyond EOD, truncated [ 181.526458][T22993] loop1: detected capacity change from 0 to 264192 [ 181.533940][ T1028] loop5: p2 p4 [ 181.537947][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 181.546282][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 0: open$dir(&(0x7f00000010c0)='./file0\x00', 0x111040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xa200, 0x0) 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x20000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x8000000) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x479, &(0x7f0000000100)={0x0, 0x9cd9, 0x2, 0x1, 0x3e5, 0x0, r0}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00003b2000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000640)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x1, 0x637f, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/68, 0x44}], 0x5, 0x0, 0x1, {0x0, r7}}, 0x17c6) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x842f3c2da5e89cf4}, 0xbe79) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 181.584987][T22993] loop1: p2 p4 [ 181.592035][T22993] loop1: p2 size 327680 extends beyond EOD, truncated [ 181.602529][T22999] loop3: detected capacity change from 0 to 4 [ 181.603447][T23008] loop5: detected capacity change from 0 to 264192 [ 181.624883][T22993] loop1: p4 size 2097152 extends beyond EOD, truncated [ 181.675056][T23008] loop5: p2 p4 [ 181.679824][ T1028] loop3: p2 p4 [ 181.683544][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 181.693899][T23008] loop5: p2 size 327680 extends beyond EOD, truncated [ 181.702632][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 181.711424][T23008] loop5: p4 size 2097152 extends beyond EOD, truncated [ 181.719478][T22999] loop3: p2 p4 01:34:19 executing program 3: syz_read_part_table(0xa00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:19 executing program 1: syz_read_part_table(0x40000800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:19 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/179) 01:34:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x34e, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) io_uring_enter(r1, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:19 executing program 5: syz_read_part_table(0xd000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 181.723369][T22999] loop3: p2 size 327680 extends beyond EOD, truncated [ 181.738214][T22999] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1231, &(0x7f0000000100)={0x0, 0x4698, 0x1, 0x2, 0x15}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) 01:34:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28}, {0x6}]}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 181.829649][T23122] loop1: detected capacity change from 0 to 264192 [ 181.844511][T23125] loop5: detected capacity change from 0 to 264192 [ 181.888599][T23122] loop1: p2 p4 [ 181.892384][T23122] loop1: p2 size 327680 extends beyond EOD, truncated [ 181.914661][T23122] loop1: p4 size 2097152 extends beyond EOD, truncated [ 181.914740][T23125] loop5: p2 p4 01:34:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 181.939267][T23132] loop3: detected capacity change from 0 to 5 [ 181.952407][T23125] loop5: p2 size 327680 extends beyond EOD, truncated [ 181.970119][T23125] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0401, 0x4) 01:34:19 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x1010, r3, 0x21d1a000) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 181.994648][T23132] loop3: p2 p4 [ 181.998709][T23132] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.012212][T23132] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.025190][T23122] loop1: detected capacity change from 0 to 264192 [ 182.084917][T23122] loop1: p2 p4 [ 182.092945][T23122] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.098052][T23125] loop5: detected capacity change from 0 to 264192 [ 182.109419][T23132] loop3: detected capacity change from 0 to 5 [ 182.126110][T23122] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:19 executing program 5: syz_read_part_table(0xe000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 182.145588][T23132] loop3: p2 p4 [ 182.154014][T23132] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.173708][ T1028] loop1: p2 p4 [ 182.178529][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.188495][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:20 executing program 3: syz_read_part_table(0xb00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:20 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0xffff, 0x1800}], 0x1, 0x0) 01:34:20 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast1}, 0x0, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="1f6c482377436053ae2470e1503bfa3a818f41df5b293272119c23b3783b909c10507f0db8cf3ea96306b2bfc9072c36644fc46c0edffdb2a1e98ba173b2bc3e6a51e0", 0x43}, {&(0x7f0000000280)="1f6b799a6b2b34bc6484e6446e292df03141439740c056f16fcdebe9d02c6654b760c5880bcbacce7efd3342ffd2236bba1fe1066d09a665ac9ace8dcda0915b8701bf683fa8079d30e174fc1049b3fc4789272b8ca506041509ec6b9d90335303745acf3c3f07bbc7bedb5a09878b", 0x6f}, {&(0x7f0000000340)}, {&(0x7f0000000380)="7311c868a4d6c1b41f932cee96d47e98daba2a78d8a8f479292e7243202e02ef928b2761be63e295bd531ceed72956dc2f55a1cf7e842e1a4352247418450705c45a188ee39ba12318fdcdf16c260052c87d169ba32c6b264a0941d993592ebd4808e6436173901820528fb4fbf4b3e27ab681f214", 0x75}, {&(0x7f0000000400)="06d1cf9ed7c76a5ec720375f47f70de331bab77720f7d33ac36ffa705b98b67046a301659cdc40ca3814aad9ffdf42b1ed3efe0f9172b94abd3faea71272f8f05e14882d69bc3a463a9eed691d032aed5db01fac1082e315f6919dbe1bb1aef5b523da0061cc1f00888103ccb5211ffc88ed2ff675b015704b18c2df20b72e7aa3f6c931f6ae1b06cd118b2b52a01da7b7f1acfe5b39f284c98c8c4f3845817de5b4079bbe600e1a6f0326c94e7ab461e360d87673969b91271aa599392050a41dda7a15", 0xc4}], 0x5, &(0x7f0000000580)=[{0x1010, 0x0, 0x4, "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"}, {0xb8, 0x103, 0x6b0, "5b65c99144c8725af275a48135f3acb96e6ba9b02774b2a6081567a97ea45b699ccd51b99d9ad5230b5a76ed4874fb2cbdbba2cc10ebe32f372302c56779df29ae6483a5a86b9e0ee0782e4b07b83fa904651c725c1f5180c43ba4af459d49f924c39b5e655c62566a5534c8471c75f3d475b6a1fd0df7e57612d9118caaf6230835d796388447b51ebebab8d8ab5764341b2dd15959f94e9c617af0608aaff3e3c8e60832"}, {0x68, 0x101, 0x4, "cefb3858187fc5acba7bd1033f3b952dd0ce0a03a1e263d33cfb9176e6ec50d818ef1a67cd5dbf515696b8b5309e99b53f4c7140ceec3462a6972279af2dc0d9b288657c266881ecc6809da67f8dcbbfab"}, {0xf0, 0x1, 0xffffff00, "0f3edf38eddb5a96919723b46975e0b1501d658372548ff7f76fc08f52b23571dd03203f35447c5645e85bcc3e2367ce53a18be598003ff0b9e7616c7d8ace0e28dbbb28e21eb685ae39e6dbb7e7252d9f0cbe264c3a2d0cd40966102c7d7fd635c39c000ee0394c22a634ec0cd51dd97eee852fc69ea93ae19e1090e1cf8d4f49fc005ec55da831dfc9654a7d090f7bcd1538043cf5b3b7cc3d40c3a7fdeeae656e23ec892d39810ab39e02fcacf28459be35d4a5c65cb7d10bc9473249bd5891b9d20b95faab7010705a22535360ff3be800c03020469089216db79ca1c01c"}, {0xf8, 0x107, 0x3, "5fefba05555173fe9a65cd3fd30c92ffd66c022f52fd8cf7354cb28fcd51cfdc92c441748fc3bbe97f10190fdd6f377ad7fe3ab2cd0812768a3990bb533f8268239d85f7c7c7dbf3cea427eb77cc66a9d9db71d4cc7b8c3446976593347609f1534ee7550d79cfcd3620f174627ff7082c5b7f381d18da587a2ad0fd61a1be7b127c77d5fb23329f5f6a52c87ed32246b18f63fa1e91d5aaab40d193ae941e11d53492a737072f72aa65e26a0614cfedaadd79c811c7bb76199d21af52d2084c027b6856438bf85e93e687e89395e4611df336c4f30ff94c92aa8b46c36aafb781dc2044d5"}, {0xa0, 0x10c, 0xff, "18dd0c2b0c57a01d1ced027aa08ad8bdcf318c024acccaada142745511822cb407bcbe74ffa342f9d3bde6bf98b84c7aa86f416ae82b5cc53f50537230250cd7243a2761df9cd4d99a78e66d9cc18d108fb36b5167be52c2fb7a5fa788a228ff4517352487a18e7c34204d53f9b92c297681f062973a384aa3f5fb8ca5334d5e0a3fee351db8ae0524fc4b0af3161b"}, {0x70, 0xff, 0x80000000, "107f0a642fac47d82753de95aece1ec4bb7d13efb2cac87133619044401183687c7f7d53be60b65fe3eb9b8d8498efb44eb5c861c59ef6b0d3799d65d74fbb27db6f5d2ef9e72c784f945fa2c7c035b63b184d29c9549e71fd"}], 0x1428}, 0x8800) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x20010, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) r6 = dup(r3) io_uring_enter(r6, 0x60fd, 0x8bae, 0x1, &(0x7f0000000340)={[0x3000000000000]}, 0x8) r7 = fcntl$dupfd(r0, 0x406, r0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x6, 0x0, 0x1, {0x0, r5, r7}}, 0x32e5) 01:34:20 executing program 1: syz_read_part_table(0x48000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 182.205301][T23132] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.230022][T23208] loop5: detected capacity change from 0 to 264192 01:34:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x801}, 0x14}}, 0x0) [ 182.266166][T23208] loop5: p2 p4 [ 182.270211][T23208] loop5: p2 size 327680 extends beyond EOD, truncated [ 182.282657][T23208] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:20 executing program 2: r0 = add_key$keyring(&(0x7f0000001500)='keyring\x00', &(0x7f0000001540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000015c0)='keyring\x00', &(0x7f0000001580)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) [ 182.327944][T23224] loop1: detected capacity change from 0 to 264192 [ 182.342008][T23208] loop5: detected capacity change from 0 to 264192 [ 182.353940][T23236] loop3: detected capacity change from 0 to 5 01:34:20 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x1, 0x0, 0x7fff, 0x5, 0x1}, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mmap(&(0x7f00001da000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r4, 0x5e78a000) creat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r3, r0, r0, r5], 0x4) [ 182.384938][ T1028] loop1: p2 p4 [ 182.388762][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.396891][T23236] loop3: p2 p4 [ 182.397115][T23208] loop5: p2 p4 [ 182.401080][T23236] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.424703][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 182.436518][T23236] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.444836][T23208] loop5: p2 size 327680 extends beyond EOD, truncated [ 182.452841][T23224] loop1: p2 p4 [ 182.456912][T23224] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.474014][T23208] loop5: p4 size 2097152 extends beyond EOD, truncated [ 182.475055][T23224] loop1: p4 size 2097152 extends beyond EOD, truncated [ 182.520279][T23236] loop3: detected capacity change from 0 to 5 [ 182.555590][ T1028] loop3: p2 p4 [ 182.559832][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.561505][T23224] loop1: detected capacity change from 0 to 264192 [ 182.574058][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.584117][T23236] loop3: p2 p4 [ 182.587935][T23224] loop1: p2 p4 [ 182.591655][T23224] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.598944][T23236] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.606613][T23236] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.606989][T23224] loop1: p4 size 2097152 extends beyond EOD, truncated [ 182.675109][ T1028] loop1: p2 p4 [ 182.678639][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.695237][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0xfffffffffffffffd) 01:34:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004640)={'sit0\x00', 0x0}) 01:34:20 executing program 5: syz_read_part_table(0xf000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:20 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x7d59, &(0x7f0000000100)={0x0, 0x8893, 0x10, 0x1, 0x221}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80800}, 0x401) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 01:34:20 executing program 1: syz_read_part_table(0x4c000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:20 executing program 3: syz_read_part_table(0xc00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:20 executing program 2: getrandom(&(0x7f0000000140)=""/4096, 0x1000, 0x0) 01:34:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xa, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) 01:34:20 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0xaf5, 0xc49e, 0x1, &(0x7f0000000200)={[0xfffffffffffffffb]}, 0x8) r4 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') ioctl$int_out(r7, 0x0, &(0x7f00000014c0)) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r9, 0x7b, {0x0, r8}, 0x200, 0x2, 0x1, {0x0, 0x0, r10}}, 0x3ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r8, &(0x7f0000000040)={0x58400, 0x2, 0xb}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9fc2) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) sync_file_range(r7, 0x56, 0x7f, 0x1) preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000200)}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, 0xe6, 0x4) [ 182.874211][T23356] loop3: detected capacity change from 0 to 6 [ 182.877139][T23357] loop5: detected capacity change from 0 to 264192 [ 182.880882][T23358] loop1: detected capacity change from 0 to 264192 [ 182.924905][T23356] loop3: p2 p4 [ 182.928492][T23356] loop3: p2 size 327680 extends beyond EOD, truncated [ 182.936805][T23357] loop5: p2 p4 [ 182.944644][T23358] loop1: p2 p4 [ 182.948306][T23358] loop1: p2 size 327680 extends beyond EOD, truncated [ 182.957230][T23357] loop5: p2 size 327680 extends beyond EOD, truncated [ 182.957521][T23358] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:20 executing program 0: semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000140)) [ 182.964973][T23356] loop3: p4 size 2097152 extends beyond EOD, truncated [ 182.978950][T23357] loop5: p4 size 2097152 extends beyond EOD, truncated [ 182.988909][ T1028] loop3: p2 p4 [ 182.993286][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.001055][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:20 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0xffffffff, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x5682, &(0x7f0000000100)={0x0, 0xa424, 0x4, 0x2, 0x11, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r3, 0x5bdd, 0x4aa9, 0x1, &(0x7f0000000200)={[0x8]}, 0x8) 01:34:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) [ 183.047302][T23356] loop3: detected capacity change from 0 to 6 [ 183.054518][ T1028] loop1: p2 p4 [ 183.064824][T23357] loop5: detected capacity change from 0 to 264192 [ 183.068125][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.079985][T23356] loop3: p2 p4 [ 183.083790][T23356] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:20 executing program 2: add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) [ 183.097679][T23356] loop3: p4 size 2097152 extends beyond EOD, truncated [ 183.113303][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 183.114794][T23357] loop5: p2 p4 [ 183.130142][T23357] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:20 executing program 5: syz_read_part_table(0x10000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:20 executing program 3: syz_read_part_table(0xd00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 183.147829][T23357] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:21 executing program 1: syz_read_part_table(0x54000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x1ce0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x9, 0x0) io_uring_setup(0x3ad6, &(0x7f0000000200)={0x0, 0xab1b, 0x0, 0x3, 0x215, 0x0, r0}) sendfile(r3, r4, &(0x7f0000000040)=0x5, 0xff9e) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x8}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0x1, 0x0, 0x2, 0x0, 0x1, {0x0, r7}}, 0x3) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ftruncate(r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) 01:34:21 executing program 0: socket(0x26, 0x5, 0xe72) 01:34:21 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='k', 0x1, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000180)=""/186, 0xba) [ 183.222456][T23358] loop1: detected capacity change from 0 to 264192 [ 183.240566][T23457] loop3: detected capacity change from 0 to 6 01:34:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) [ 183.313333][T23457] loop3: p2 p4 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x480400, 0xa) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x100, &(0x7f00000000c0)=[r0, r5, r6], 0x3, 0x0, 0x1}, 0x7f) 01:34:21 executing program 0: accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) fork() 01:34:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 183.333552][T23457] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.353411][T23457] loop3: p4 size 2097152 extends beyond EOD, truncated [ 183.371711][T23483] loop5: detected capacity change from 0 to 264192 01:34:21 executing program 2: clock_gettime(0x3, 0x0) 01:34:21 executing program 0: socket(0x0, 0x407, 0x0) [ 183.414821][T23483] loop5: p2 p4 [ 183.421630][T23483] loop5: p2 size 327680 extends beyond EOD, truncated [ 183.429845][T23483] loop5: p4 size 2097152 extends beyond EOD, truncated [ 183.434779][T23484] loop1: detected capacity change from 0 to 264192 [ 183.443631][T23457] loop3: detected capacity change from 0 to 6 [ 183.484801][ T1028] loop3: p2 p4 [ 183.488504][T23484] loop1: p2 p4 [ 183.492090][T23484] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.499154][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.502869][T23483] loop5: detected capacity change from 0 to 264192 [ 183.506406][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 183.520680][T23484] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:21 executing program 5: syz_read_part_table(0x11000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:21 executing program 3: syz_read_part_table(0xe00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 183.536106][T23457] loop3: p2 p4 [ 183.539838][T23457] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.551017][T23483] loop5: p2 p4 [ 183.552765][T23457] loop3: p4 size 2097152 extends beyond EOD, truncated [ 183.555152][T23483] loop5: p2 size 327680 extends beyond EOD, truncated [ 183.571406][T23483] loop5: p4 size 2097152 extends beyond EOD, truncated [ 183.581163][T23484] loop1: detected capacity change from 0 to 264192 01:34:21 executing program 1: syz_read_part_table(0x55000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x5fc1, &(0x7f0000000100)={0x0, 0x19c2, 0x8, 0x3, 0xd2, 0x0, r0}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x1e4053, r0, 0x10000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000200)={0x101000, 0x6a, 0x11}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:21 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)="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"}], 0x12db, 0x0) 01:34:21 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x0, r0/1000+60000}, {0x77359400}}, 0x0) [ 183.614882][T23484] loop1: p2 p4 [ 183.618430][ T1028] loop3: p2 p4 [ 183.618661][T23484] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.622430][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.630620][T23484] loop1: p4 size 2097152 extends beyond EOD, truncated [ 183.643464][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x65a3, &(0x7f0000000080)={0x0, 0xffffffff, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_setup(0x7787, &(0x7f0000000200)={0x0, 0x539d, 0x10, 0x0, 0x31b, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="e4736c4888107559067695d94447de15699f1b23ea98d310e4d3904bf580d2969d9132fcb3cb85caf80c5068", 0x2c}, 0x5) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x1) 01:34:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1}}], 0x1, 0x0, 0x0) [ 183.663430][T23563] loop5: detected capacity change from 0 to 264192 01:34:21 executing program 2: add_key(&(0x7f0000000280)='logon\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="bd", 0x1, 0xffffffffffffffff) [ 183.728341][T23563] loop5: p2 p4 [ 183.741760][T23563] loop5: p2 size 327680 extends beyond EOD, truncated [ 183.749852][T23563] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:21 executing program 2: setresuid(0x0, 0xee01, 0x0) r0 = geteuid() r1 = geteuid() setresuid(r0, 0x0, r1) [ 183.775490][T23588] loop3: detected capacity change from 0 to 7 [ 183.797005][T23595] loop1: detected capacity change from 0 to 264192 [ 183.820981][T23563] loop5: detected capacity change from 0 to 264192 01:34:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000002440)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x5}, @NFCTH_STATUS={0x8}]}, 0x34}}, 0x0) 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x400000) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000640000/0x1000)=nil, 0x1000, 0x200000f, 0x130, r6, 0xe12b8000) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000200)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r7, 0x4ada, 0x3c0e, 0x1, &(0x7f0000000100)={[0x10001]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x2, 0x10, r0, 0x10000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r10 = signalfd(r3, &(0x7f0000002980)={[0x9]}, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r9, &(0x7f00000028c0)=[{&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/152, 0x98}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/253, 0xfd}, {&(0x7f00000027c0)=""/243, 0xf3}], 0xa, 0x0, 0x1) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0xb9585dbe6245c5f8}, 0x6) [ 183.828135][T23588] loop3: p2 p4 [ 183.831850][T23588] loop3: p2 size 327680 extends beyond EOD, truncated [ 183.834697][T23595] loop1: p2 p4 [ 183.844555][T23595] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.851727][T23588] loop3: p4 size 2097152 extends beyond EOD, truncated [ 183.853678][T23595] loop1: p4 size 2097152 extends beyond EOD, truncated [ 183.869421][ T1028] loop1: p2 p4 01:34:21 executing program 5: syz_read_part_table(0x12000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 183.872962][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.881949][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 183.953930][T23595] loop1: detected capacity change from 0 to 264192 [ 183.967315][T23588] loop3: detected capacity change from 0 to 7 [ 183.990200][T23595] loop1: p2 p4 [ 183.993754][T23595] loop1: p2 size 327680 extends beyond EOD, truncated [ 183.994630][T23588] loop3: p2 p4 01:34:21 executing program 3: syz_read_part_table(0xf00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 184.004758][T23588] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.009921][T23650] loop5: detected capacity change from 0 to 264192 [ 184.012420][T23588] loop3: p4 size 2097152 extends beyond EOD, truncated [ 184.027654][T23595] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.038782][ T1028] loop1: p2 p4 [ 184.042617][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:21 executing program 1: syz_read_part_table(0x60000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) add_key$user(&(0x7f0000000400)='user\x00', 0x0, 0x0, 0x0, r0) 01:34:21 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0}, 0x0) r3 = syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0xffffc7a7) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x5, 0xffffffff, 0x27}) syz_io_uring_submit(r10, r13, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x3, 0x4000, @fd=r14, 0x6, &(0x7f0000000380)="39cdbfac58031fa57772fbc114ea23c130bac3e267d0dde21ca16d28d0a4ff1061821c18719c864ecc65c48bcfd2b91ff4cff46040350af8284017c02b686b180b650df9037e184f662015b71c23de897c8b4c11d1bb96caa939c948bda0695e8144b1e6b95aa840253399743f6b78c6bf08f2fb0859ab06bb", 0x79, 0x12}, 0x2) syz_io_uring_setup(0x3bfc, &(0x7f0000000100)={0x0, 0x6450, 0x0, 0x0, 0x120, 0x0, r0}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006d4000/0x10000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r15, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa310}}, 0x400) [ 184.051216][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.074638][T23650] loop5: p2 p4 [ 184.078473][T23650] loop5: p2 size 327680 extends beyond EOD, truncated [ 184.093218][T23650] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 184.142853][T23650] loop5: detected capacity change from 0 to 264192 01:34:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) [ 184.184646][T23650] loop5: p2 p4 [ 184.188455][T23650] loop5: p2 size 327680 extends beyond EOD, truncated [ 184.196163][T23690] loop1: detected capacity change from 0 to 264192 [ 184.209575][T23691] loop3: detected capacity change from 0 to 7 [ 184.223072][T23650] loop5: p4 size 2097152 extends beyond EOD, truncated [ 184.264625][ T1028] loop1: p2 p4 [ 184.268294][T23691] loop3: p2 p4 [ 184.268319][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 184.271875][T23691] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.295301][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.306431][T23690] loop1: p2 p4 [ 184.311087][T23690] loop1: p2 size 327680 extends beyond EOD, truncated [ 184.319376][T23690] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.334079][T23691] loop3: p4 size 2097152 extends beyond EOD, truncated [ 184.342815][ T1028] loop3: p2 p4 [ 184.348931][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.356478][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 184.358493][T23690] loop1: detected capacity change from 0 to 264192 [ 184.394823][T23690] loop1: p2 p4 [ 184.399224][T23690] loop1: p2 size 327680 extends beyond EOD, truncated [ 184.409013][T23690] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.416570][T23691] loop3: detected capacity change from 0 to 7 [ 184.424227][ T1028] loop1: p2 p4 [ 184.427893][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 184.435576][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.444997][T23691] loop3: p2 p4 [ 184.448813][T23691] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.457917][T23691] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$char_usb(r1, 0x0, 0x0) 01:34:22 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x4002, 0x160, 0x10}, 0x18) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x7, 0x4, 0x5966, 0x9, 0x1, 0x1}, 0xffff) 01:34:22 executing program 5: syz_read_part_table(0x13000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f0000000300)="80e1", 0x2, r0) 01:34:22 executing program 1: syz_read_part_table(0x63000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:22 executing program 3: syz_read_part_table(0x1100, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:22 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = geteuid() keyctl$chown(0x4, r0, r1, 0x0) [ 184.734478][T23778] loop3: detected capacity change from 0 to 8 [ 184.738154][T23777] loop5: detected capacity change from 0 to 264192 [ 184.758458][T23783] loop1: detected capacity change from 0 to 264192 [ 184.779092][T23778] loop3: p2 p4 01:34:22 executing program 4: ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000380)) r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) splice(r0, &(0x7f00000003c0)=0x1f, r0, &(0x7f0000000400)=0x8, 0x7f, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000004c0)={0x1000, 0x3f}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x5b92, &(0x7f0000000440)={0x0, 0x43a2, 0x8, 0x1, 0x297, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r4, 0x0) syz_io_uring_setup(0x3ea6, &(0x7f0000000200)={0x0, 0x95e8, 0x2, 0x0, 0x203, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0xe73a}}, 0x8) io_uring_enter(r0, 0x1653, 0x0, 0x0, 0x0, 0x0) [ 184.784841][T23777] loop5: p2 p4 [ 184.787509][T23778] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.788421][T23777] loop5: p2 size 327680 extends beyond EOD, truncated [ 184.795827][T23778] loop3: p4 size 2097152 extends beyond EOD, truncated [ 184.809986][T23783] loop1: p2 p4 [ 184.815046][T23783] loop1: p2 size 327680 extends beyond EOD, truncated [ 184.819161][T23777] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 01:34:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) [ 184.832961][T23778] loop3: detected capacity change from 0 to 8 01:34:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000340)='\\', 0x1, r0) keyctl$update(0x2, r1, &(0x7f0000000180)="a0", 0x1) [ 184.859669][T23783] loop1: p4 size 2097152 extends beyond EOD, truncated [ 184.899312][T23778] loop3: p2 p4 01:34:22 executing program 4: r0 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="96627db4833cd61978e3391fd0213c407a4a076570e514668246af4ffbdfb9709b8270f1abe9653b46f4de87677cc13e30a8540c8f506ea91602d408a9b0317048727247cb308a6d19ec364cbca9754116f69e6e4e86a15b8a2cd7a51c9f6efda324d302b152f960661d98ffffbf82e945599fe6f7b0a43c30dea18e3d09247c41b95f7823cb172457e4daebd0c6c455edbe81d578a4bcc067bc508af92d2f3b05a5518536d47c37df1f6f70310d8fb4f11d60c578977101436e5761d4e6f3ca585787304c548923127b6fc790a1046598e574a3ab6d3d6e", 0xd8, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000340)=""/240, 0xf0) r1 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0xffffffff, 0x20, 0x0, 0x200000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:22 executing program 3: syz_read_part_table(0x1200, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 184.906569][T23778] loop3: p2 size 327680 extends beyond EOD, truncated [ 184.916678][T23777] loop5: detected capacity change from 0 to 264192 [ 184.925335][T23778] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:22 executing program 1: syz_read_part_table(0x68000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 184.977105][ T1028] loop5: p2 p4 [ 184.981831][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 184.993352][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.010830][T23777] loop5: p2 p4 [ 185.017315][T23777] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:22 executing program 5: syz_read_part_table(0x20000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 01:34:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 01:34:22 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r4, r5, r6, r7, r0, r0, r0, r0, r0], 0x9) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 185.027675][T23852] loop1: detected capacity change from 0 to 264192 [ 185.027757][T23777] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.042342][T23863] loop3: detected capacity change from 0 to 9 [ 185.049220][T23852] loop1: p2 p4 [ 185.052908][T23852] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.066282][T23852] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:22 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x8000865e, 0x1, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x0) r3 = syz_io_uring_setup(0x4369, &(0x7f0000000100)={0x0, 0xef96, 0x8, 0x1, 0x5a, 0x0, r0}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r5, &(0x7f0000000440)=[{{&(0x7f0000000240)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x5, 0x81, "6864c59f4dcabc057e14919615397d075a48c5b2878958d397cc5bc263c18c71b1a1a2d60f39021a54748aabf1f8b609ddd9599cc03f4930f9d508c79fc61c", 0x29}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="ad5f88b718f3b08ea54641dccdf574706f0b76a4c20b50eb10af4f59091f63e608e4b917a6d2477231e402bf7fc338b527baf44d64617dd8fa01d4d4b47c7e0a82c59143ad184c78877dbe26e981b5f5641caab9c6010443e961ef0876c8b874802573cec6e4b14240bbe715a2673673cccaa939a3c4a0cbdcbfb2e892c3ff897a83b7db3f22a80b879dda7f623dacf3bcf03072b4d666f957fbdaab8653c74ef764b5c522ab3f7e87fb2ee1de06c4dbf474aba155bef76ba4d84de40a30753def9f0beefcda20fbb0507ee3cde64f0ee517d321e215e33ec1d075be956106d84686cd784310", 0xe6}], 0x1}}], 0x1, 0x4004000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x4000)=nil, 0x4000, 0x3, 0x1010, r3, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0xa, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000640)="4eb41944a7ba2bf76057c309fda6e263dd650dc71377f0", 0x17}, {&(0x7f0000000680)="c406fdeda7d64b5ca04779d981ee7adf30d474f49edfb84624c5212c268de0837759e9ed1120f1356b3163a6e2b4de5d48f76bd4a6e24d489b91b658d76088864b93a266608c27b86941e2c08577a1a161221989a04c138ca055a420e8614ed7c3bcb83d5c7737abc43fefb9ae9259cb2bd1dde8d2b03c0fcc878fb39a26136737cad6a200b81ed9b347b571bc8656ae4c9dc8d7b51253d8b172825092e653571302b24cf44e071c145bc3d232564ee47790", 0xb2}, {&(0x7f0000000740)="e67cb9f657cc18c1dc061e5a628c0a994ce571e33b1603c991fb4e021ee34310a5ea1ec1588d88d519eba313410ea587039e6d47997349ca1084c9bfd1849f66c8c61b5ba7d4e6970a9a5a86af3012436e641368f43b8f8f00c0eb2d03be6764235d51da5dbf1acdd6ee6a9809cbcf23a9c421d1", 0x74}, {&(0x7f00000007c0)="e8520e37af52f550c81b15f4f62294b8c3d65aa167ccd72d20f56b43c1383def316d8bf69470e067cb0b8493bda0916f5d77f0373203", 0x36}, {&(0x7f0000000800)="d4938de58586679ac013d49c15c91e8936e2dc43e5ba3cb96d4ee466b0dc44fbdf4de228268f86deb0e013d965a735f9f6e9d23da7e678f6d02ed9eabfb0c2b6a4d0cce54da63d501788cf38c92dfa66aa07b31aef1304d7ee9d3c285060631846d2b9b9b35c6e194376b00735343191fe0ffaba7200c93c894d8065a8fce8e88f8ac00008d8d65be4f7417c69288de8db6301cf2e187c7d279e729aa6bcc7c5575dcdf1434f094921017d2f4ee9ea58eb8fb1b3f7c0f67b2d33bd46930c5ac593f8b7cf3f5304a81cef7cb99d1bb70621987e9cac06dfc05fec24613505f1", 0xdf}, {&(0x7f0000000900)="2e399ddcc0b0242d1daa6572b991fd5b780bd4af2e224d2050fc915e873d176724db367a125dd756200ca7f85af7981bb75307b1adf47a438a2e8502db3f7b6b4d0da78b9cf197cb96dcd28583264928e973df7f67e666372ba77ccb07c221af531320676cef98728ffb0449510eca317122896d8e9f9fef4c8bf0068a719e56ccf309a9c29630b9c80d0538331454559f414866f7952daaad7addd735eaafd7c3416fe4bc5092389a1e2d80b1fa3c683c3282586abcae3c0a442fb61cdbf0f7775d93014ad3cb0c16027b0130ad42", 0xcf}, {&(0x7f0000000a00)="be5b11e6503f5ce0bb5983373e5d73ecc9fb8a88767c35dc29d61d00afb2ba105cc7281e", 0x24}, {&(0x7f0000000a40)="bec7", 0x2}, {&(0x7f0000000a80)="a58edf180ff6d0f04428abf5e5d56bb92f322bd50e8473cb4a7fb3cdda78b528f511c36c47643f2ee3394d54bbf9c2aa9a6942829a5148e94c41ef2ad8771c03bcb9ecd33a3e9a0003b2f3dc23d6cbf65470616fa2604f734b383363b3ffa578918de921b1ceb0d5725ccb9c87e3971246b46cf4a58fc4e4e0d0a493b71d2825a15817f7a9f1084eb2738b62550f90c0537a9ab1ad46622fe5142079ea49341362377ec6d1cf44a7754083132212d12cd482146b28e7db8d7e6b23", 0xbb}, {&(0x7f0000000b40)="3656cb094d89d9c0a982457d75d3722a1cc6e2a411677197d8397007346663df1a767ffbca06812d75545c00469115edea82473817e5ed933713d5f7e1ded911bfad8a70b2c3e833220d15d53c6ce6542b7e1ea65e0e318c73f88fb7c352b1ac9ac316fc246e2517ce95ccc8ae01b7c5d1a1b7a6c4bb2d3ddf6d62a17fe06116be56a3523881d59ff965d9c9fa8c458f7d3e9c3a5599da19fef9ec271329e2153ee2c682a9ff4c621074a069e299d66d90a3d40a99bed1e0f1fef5c2595cfb0f20af7a6a8fa36eb7ed9b3a01dd4c8c1215c04059ab1ea956e683923da11165304e0b2ba188413d4a37fafb7cf1f2fe6d", 0xf0}], 0xa, 0x14, 0x0, {0x1}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000600)=0x9, 0x0, 0x4) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') syz_io_uring_submit(r1, r7, &(0x7f00000004c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0xadc, 0x0, 0x5, 0x0, 0x0, {0x0, r6}}, 0x8) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000500)={@private1={0xfc, 0x1, [], 0x1}, 0x36}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r10, r2, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x9) splice(r0, &(0x7f0000000540), r9, &(0x7f0000000580)=0x1, 0x9, 0x8) [ 185.078640][ T1028] loop1: p2 p4 [ 185.082193][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.090174][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 185.104722][T23863] loop3: p2 p4 [ 185.116487][T23863] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:22 executing program 1: syz_read_part_table(0x6c000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) [ 185.132294][T23852] loop1: detected capacity change from 0 to 264192 [ 185.143786][T23863] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:22 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x400}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x42c9, 0x54b4, 0x2, &(0x7f0000000040)={[0x3]}, 0x8) 01:34:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) [ 185.175816][T23905] loop5: detected capacity change from 0 to 264192 [ 185.186349][T23903] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 01:34:23 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x140, 0x1, {0xfff, r6}}, 0x28d) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000100)={0x6, 'ip6_vti0\x00', {0x7ff}, 0x5}) [ 185.234632][ T1028] loop5: p2 p4 [ 185.242374][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.256313][T23863] loop3: detected capacity change from 0 to 9 [ 185.268012][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.268331][T23926] loop1: detected capacity change from 0 to 264192 [ 185.283373][T23905] loop5: p2 p4 [ 185.287383][T23905] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.294811][T23863] loop3: p2 p4 [ 185.299168][T23863] loop3: p2 size 327680 extends beyond EOD, truncated [ 185.306573][T23926] loop1: p2 p4 [ 185.310513][T23926] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.318983][T23905] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.319868][T23926] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:23 executing program 3: syz_read_part_table(0x1300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) [ 185.343040][T23863] loop3: p4 size 2097152 extends beyond EOD, truncated [ 185.409996][T23926] loop1: detected capacity change from 0 to 264192 [ 185.417217][T23905] loop5: detected capacity change from 0 to 264192 [ 185.464936][T23926] loop1: p2 p4 [ 185.464965][ T1028] loop5: p2 p4 [ 185.468615][T23926] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.475115][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.487418][T23926] loop1: p4 size 2097152 extends beyond EOD, truncated [ 185.495452][T23973] loop3: detected capacity change from 0 to 9 [ 185.502698][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.511184][T23905] loop5: p2 p4 [ 185.515131][T23905] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.522363][T23905] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.529900][T23973] loop3: p2 p4 [ 185.533575][T23973] loop3: p2 size 327680 extends beyond EOD, truncated [ 185.541762][T23973] loop3: p4 size 2097152 extends beyond EOD, truncated [ 185.555012][ T1028] loop3: p2 p4 01:34:23 executing program 5: syz_read_part_table(0x24000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xf73c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 01:34:23 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0xc7a7, 0x1, 0x0, 0x269}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000073883f"], 0x1c}}, 0x0) 01:34:23 executing program 1: syz_read_part_table(0x74000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 0: r0 = fork() ptrace(0x10, r0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) [ 185.558621][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 185.566760][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:23 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x80000000) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 185.616200][T23973] loop3: detected capacity change from 0 to 9 01:34:23 executing program 0: r0 = socket(0x2, 0x3, 0x93) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x208}}, 0x0) 01:34:23 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000140)={0x2}, 0x0, 0x0, 0x0) [ 185.662525][T24018] loop1: detected capacity change from 0 to 264192 [ 185.663578][T24034] loop5: detected capacity change from 0 to 264192 [ 185.677831][T23973] loop3: p2 p4 [ 185.683718][T23973] loop3: p2 size 327680 extends beyond EOD, truncated [ 185.694493][T23973] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:23 executing program 3: syz_read_part_table(0x2000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) 01:34:23 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 185.724736][T24034] loop5: p2 p4 [ 185.728331][ T1028] loop1: p2 p4 [ 185.733042][T24034] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.744535][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.765904][T24034] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.766612][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 185.786841][T24018] loop1: p2 p4 [ 185.790429][T24018] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.820588][T24018] loop1: p4 size 2097152 extends beyond EOD, truncated [ 185.830399][T24034] loop5: detected capacity change from 0 to 264192 [ 185.838063][T24076] loop3: detected capacity change from 0 to 16 01:34:23 executing program 5: syz_read_part_table(0x25000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 0: add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="457cc1965b3655cfa83690705523762a31ddb90fefac8f0a3c1a38407c811bc803d56329342d9a47a3c4bb3128c16917e06114927d20", 0x36, 0xfffffffffffffffe) 01:34:23 executing program 4: r0 = syz_io_uring_setup(0x6e80, &(0x7f0000000080)={0x0, 0x80000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0xfffffffffffffe01, 0x20000000, 0x1, 0x8, 0x0, [0xfffffffa, 0x5, 0x3898, 0x800]}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f0000000140)="f9df93e3a15b70a2d23cf2323cc8d74787de509522473749b76ed094e535561d00c3d1bf68b3ab700c8183cfc3c24e4a5341f53f2ed1a53e67638965274653ca447cfd8240c66d56cf14e77b11deaa083f33785b8bbf3845e59b7ff51ee5f9fc9b2dc7acfe43f8fa00cbbf0fe80fbd128dfa1d37", 0x74, 0x4040000, 0x1}, 0xda53) 01:34:23 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x8000000200052e02, 0x40000000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 185.884726][T24076] loop3: p2 p4 [ 185.888581][T24034] loop5: p2 p4 [ 185.892313][T24034] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.899808][T24076] loop3: p2 size 327680 extends beyond EOD, truncated [ 185.904738][T24034] loop5: p4 size 2097152 extends beyond EOD, truncated [ 185.914955][T24076] loop3: p4 size 2097152 extends beyond EOD, truncated [ 185.927230][T24018] loop1: detected capacity change from 0 to 264192 01:34:23 executing program 1: syz_read_part_table(0x7a000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 01:34:23 executing program 2: pipe2(&(0x7f0000000480), 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100)={0x0, 0x2710}) [ 185.965342][ T1028] loop5: p2 p4 [ 185.968916][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 185.978042][T24018] loop1: p2 p4 [ 185.981997][T24018] loop1: p2 size 327680 extends beyond EOD, truncated [ 185.986370][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 186.002209][T24018] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.009210][T24076] loop3: detected capacity change from 0 to 16 01:34:23 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0x9, 0x6, 0x3f, 0x6}, {0x1, 0x3, 0x9, 0x6}, {0xb3d, 0x3, 0x6e, 0x5}, {0x3ff, 0x0, 0x8, 0x8}, {0x5, 0xb2, 0x20, 0x1}]}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7fff, 0x8000000000000000) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xc9) 01:34:23 executing program 0: setresuid(0xee01, 0xee01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') [ 186.038589][ T1028] loop1: p2 p4 [ 186.042770][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.052314][T24076] loop3: p2 p4 [ 186.062095][T24076] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.072809][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.075838][T24076] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.104910][T24144] loop5: detected capacity change from 0 to 264192 01:34:23 executing program 3: syz_read_part_table(0x2400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x100, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x12fe186e1eab2b89}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff84}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000844}, 0x844) r2 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) [ 186.155202][T24144] loop5: p2 p4 [ 186.157070][T24160] loop1: detected capacity change from 0 to 264192 [ 186.160400][T24144] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.177336][ T1028] loop3: p2 p4 [ 186.180969][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.184769][T24144] loop5: p4 size 2097152 extends beyond EOD, truncated [ 186.197313][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.204585][T24160] loop1: p2 p4 [ 186.208089][T24160] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.219703][T24160] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.261157][T24183] loop3: detected capacity change from 0 to 18 [ 186.278240][T24160] loop1: detected capacity change from 0 to 264192 [ 186.285818][ T1028] loop3: p2 p4 [ 186.286166][T24144] loop5: detected capacity change from 0 to 264192 [ 186.289402][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.303239][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:24 executing program 5: syz_read_part_table(0x3f000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0x173c, 0x4) 01:34:24 executing program 2: setresuid(0xee01, 0xee01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:34:24 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5f03, &(0x7f0000000100)={0x0, 0xe875, 0x20, 0x2, 0x27e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3ff) [ 186.311792][T24183] loop3: p2 p4 [ 186.315817][T24183] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.323085][T24183] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.324539][T24160] loop1: p2 p4 [ 186.334653][T24160] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.343407][T24160] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.351423][T24144] loop5: p2 p4 01:34:24 executing program 1: syz_read_part_table(0x80040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:24 executing program 2: pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000001100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) [ 186.355584][T24144] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.363229][T24144] loop5: p4 size 2097152 extends beyond EOD, truncated [ 186.372226][ T1028] loop5: p2 p4 [ 186.376494][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.393421][T24183] loop3: detected capacity change from 0 to 18 [ 186.395062][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:24 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x2d4a4d4073352443, 0x0, r3, &(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x1}, 0x10001) 01:34:24 executing program 3: syz_read_part_table(0x2500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:24 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 01:34:24 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1110000, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client='access=client'}, {@aname={'aname', 0x3d, ',}'}}]}}) [ 186.439014][T24183] loop3: p2 p4 [ 186.443241][T24183] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.455806][T24183] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.465016][T24249] loop1: detected capacity change from 0 to 264192 [ 186.524946][T24249] loop1: p2 p4 [ 186.529180][T24249] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.543353][T24249] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.551929][T24272] loop5: detected capacity change from 0 to 264192 01:34:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x102) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 01:34:24 executing program 1: syz_read_part_table(0x80ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 186.586902][T24284] loop3: detected capacity change from 0 to 18 [ 186.597221][T24272] loop5: p2 p4 [ 186.606602][T24272] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.645478][T24284] loop3: p2 p4 [ 186.649321][T24284] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.649981][T24272] loop5: p4 size 2097152 extends beyond EOD, truncated [ 186.665213][ T1028] loop5: p2 p4 [ 186.668915][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.676753][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 186.679338][T24284] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.693272][T24315] loop1: detected capacity change from 0 to 264192 [ 186.734570][T24315] loop1: p2 p4 [ 186.738655][T24315] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.749485][T24272] loop5: detected capacity change from 0 to 264192 [ 186.755975][T24315] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.769167][T24284] loop3: detected capacity change from 0 to 18 [ 186.786779][T24315] loop1: detected capacity change from 0 to 264192 [ 186.796139][T24272] loop5: p2 p4 [ 186.796178][T24284] loop3: p2 p4 [ 186.803506][T24284] loop3: p2 size 327680 extends beyond EOD, truncated [ 186.809301][T24272] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.818314][T24284] loop3: p4 size 2097152 extends beyond EOD, truncated [ 186.819546][T24272] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:24 executing program 5: syz_read_part_table(0x40000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 186.844532][T24315] loop1: p2 p4 [ 186.848359][T24315] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.856076][T24315] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.865017][ T1028] loop1: p2 p4 [ 186.868966][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 186.886117][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 186.936630][T24371] loop5: detected capacity change from 0 to 264192 [ 186.985102][ T1028] loop5: p2 p4 [ 186.989032][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 186.996961][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 187.005386][T24371] loop5: p2 p4 [ 187.009284][T24371] loop5: p2 size 327680 extends beyond EOD, truncated [ 187.017683][T24371] loop5: p4 size 2097152 extends beyond EOD, truncated [ 187.087223][T24371] loop5: detected capacity change from 0 to 264192 [ 187.136536][T24371] loop5: p2 p4 [ 187.140527][T24371] loop5: p2 size 327680 extends beyond EOD, truncated [ 187.152114][T24371] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) mmap(&(0x7f000008a000/0x3000)=nil, 0x3000, 0x1800003, 0x80010, r0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000795000/0x1000)=nil, 0x1000, 0x0, 0x20010, r4, 0xa9a91000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r9, 0x34e5, 0x4f34, 0x3, &(0x7f00000002c0)={[0x80]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r10) 01:34:25 executing program 2: clock_gettime(0xbbe9196668d7fc59, 0x0) 01:34:25 executing program 3: syz_read_part_table(0x26a9, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 1: syz_read_part_table(0x81ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 5: syz_read_part_table(0x40000800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 187.256031][T12399] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 187.271154][T12410] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 187.286870][ T1778] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 187.292332][ T703] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.306150][ T703] Buffer I/O error on dev loop5p4, logical block 33008, async page read 01:34:25 executing program 2: select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2710}) 01:34:25 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) [ 187.373324][T24409] loop1: detected capacity change from 0 to 264192 [ 187.380168][T24411] loop3: detected capacity change from 0 to 19 [ 187.396122][ T703] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.400545][T24419] loop5: detected capacity change from 0 to 264192 [ 187.407860][ T703] Buffer I/O error on dev loop5p2, logical block 33008, async page read [ 187.419484][T24411] loop3: p2 p4 [ 187.430697][T24409] loop1: p2 p4 [ 187.434895][T24409] loop1: p2 size 327680 extends beyond EOD, truncated [ 187.459995][T24409] loop1: p4 size 2097152 extends beyond EOD, truncated [ 187.469057][T24419] loop5: p2 p4 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40400, 0x0) 01:34:25 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000380)="28e1b3e4a98938aad124ad9ab26cf7912d3259d7004dc82a10f68c79cdd80d4da424a7184f427849ad56dd88f04a3394a94e6b636e01a1f4a9dd802105fca6dd8bc627ba46fbddc5fcea406030535cee075a41d98ffdef139ca93c6f8567252bb755787d38560ee95a06575cea14ead8de8128abe30e96af4c8d1ba405d6760a7260e9519c54c6bfbcab76cd97f6819e714101aa3d441bf34c881fd67b", 0x9d, 0x10000}, {&(0x7f0000000500)="453e0a3bbff76870fc1c8411caff16c99475c7ae7e84688338b982ec4c4465a055d4cecaae95b1fd62c989d31761ef40c73b4cef41aa1a8fd035089e2cb53aed36c7614f987706e0030c7f9bef141bba44a1f09e5b704469f3b4f2ccf1c070c3877e3f9f3a2529d8e87cd3aa960f2ebfdc4f0788b2729969", 0x78, 0x800}, {&(0x7f00000005c0)="a50fba888ea8ae52fc4e169de02d1cd5cd9927e68bfca3204206b016021cea6d49622947bb717aabc1ad640a49a6b5b5047f33913c2b270cde6f3e722d727f986888599ac6d910c00e4e49e1edd683b35a94613b06c507de73434751406abbb7d4080e3a3f8b4ba81c1b4d34ad0e6a54653e1cd6356e8c6bab26e121ce38bad4d0", 0x81, 0x7}], 0x420, &(0x7f0000000680)={[{@utf8no='utf8=0'}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x32, 0x30, 0x65, 0x65, 0x62, 0x68697ee3d871453d], 0x2d, [0x32, 0x0, 0x63, 0x39], 0x2d, [0x31, 0x65, 0x30, 0x63], 0x2d, [0x3a, 0x62, 0x30, 0x62], 0x2d, [0x66, 0x61, 0x65, 0x38, 0x38]}}}, {@subj_type={'subj_type', 0x3d, '/dev/rtc0\x00'}}, {@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, '*)H+'}}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@euid_eq={'euid'}}, {@uid_lt={'uid<', 0xee01}}]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 01:34:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, [], [@ra]}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 187.473084][T24419] loop5: p2 size 327680 extends beyond EOD, truncated [ 187.481275][T24411] loop3: p2 size 327680 extends beyond EOD, truncated [ 187.500783][T24419] loop5: p4 size 2097152 extends beyond EOD, truncated [ 187.512038][T24411] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:25 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) io_uring_enter(r3, 0x4f68, 0x2f50, 0x3, &(0x7f0000000100)={[0xcb9]}, 0x8) [ 187.585272][T24409] loop1: detected capacity change from 0 to 264192 01:34:25 executing program 5: syz_read_part_table(0x48000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9d7, &(0x7f0000000100)={0x0, 0x4e4, 0x2, 0x3, 0x384, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 187.631866][T24419] loop5: detected capacity change from 0 to 264192 [ 187.639342][T24409] loop1: p2 p4 [ 187.645054][T24409] loop1: p2 size 327680 extends beyond EOD, truncated [ 187.664332][T24411] loop3: detected capacity change from 0 to 19 [ 187.673918][T24409] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:25 executing program 3: syz_read_part_table(0x3f00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 1: syz_read_part_table(0x82ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x1, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 187.728621][T24459] loop2: detected capacity change from 0 to 264192 [ 187.735345][ T1028] loop3: p2 p4 [ 187.739064][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 187.748134][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 187.758857][T24411] loop3: p2 p4 [ 187.762754][T24411] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa20, &(0x7f0000000100)={0x0, 0xc50d, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 187.773271][T24411] loop3: p4 size 2097152 extends beyond EOD, truncated [ 187.775208][T24515] loop5: detected capacity change from 0 to 264192 [ 187.802123][T24523] loop1: detected capacity change from 0 to 264192 [ 187.814936][T24515] loop5: p2 p4 [ 187.818483][T24515] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:25 executing program 5: syz_read_part_table(0x4c000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:25 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0xb1da) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, @l2tp={0x2, 0x0, @multicast2}, @rc={0x1f, @any, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='ip6_vti0\x00', 0x4, 0x0, 0xff}) [ 187.827145][T24515] loop5: p4 size 2097152 extends beyond EOD, truncated [ 187.835633][T24523] loop1: p2 p4 [ 187.840491][T24523] loop1: p2 size 327680 extends beyond EOD, truncated [ 187.866014][T24523] loop1: p4 size 2097152 extends beyond EOD, truncated [ 187.910457][T24545] loop3: detected capacity change from 0 to 31 [ 187.944064][T24523] loop1: detected capacity change from 0 to 264192 [ 187.944555][T24545] loop3: p2 p4 [ 187.955859][T24545] loop3: p2 size 327680 extends beyond EOD, truncated [ 187.964088][T24570] loop5: detected capacity change from 0 to 264192 [ 187.969226][T24545] loop3: p4 size 2097152 extends beyond EOD, truncated [ 187.982881][ T1028] loop3: p2 p4 [ 187.987183][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 187.987238][T24570] loop5: p2 p4 [ 187.995327][T24523] loop1: p2 p4 [ 187.997706][T24570] loop5: p2 size 327680 extends beyond EOD, truncated [ 188.001919][T24523] loop1: p2 size 327680 extends beyond EOD, truncated [ 188.008597][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 188.017517][T24570] loop5: p4 size 2097152 extends beyond EOD, truncated [ 188.022433][T24523] loop1: p4 size 2097152 extends beyond EOD, truncated [ 188.093102][T24570] loop5: detected capacity change from 0 to 264192 [ 188.144743][T24570] loop5: p2 p4 [ 188.148987][T24570] loop5: p2 size 327680 extends beyond EOD, truncated [ 188.160254][T24570] loop5: p4 size 2097152 extends beyond EOD, truncated [ 188.225067][ T1028] loop5: p2 p4 [ 188.228717][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 188.237172][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 188.326141][T12410] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.326166][T13803] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.326282][ T703] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.344454][ T1778] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 188.351162][ T703] Buffer I/O error on dev loop5p2, logical block 33008, async page read [ 188.378379][ T703] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.390064][ T703] Buffer I/O error on dev loop5p4, logical block 33008, async page read [ 188.410782][T12410] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.410909][T13803] blk_update_request: I/O error, dev loop5, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.434622][ T703] Buffer I/O error on dev loop5p2, logical block 33008, async page read [ 188.477511][ T879] Buffer I/O error on dev loop5p4, logical block 33008, async page read [ 188.513495][T12399] Buffer I/O error on dev loop5p2, logical block 33008, async page read [ 188.532788][T24626] loop2: detected capacity change from 0 to 264192 [ 188.537942][ T879] Buffer I/O error on dev loop5p4, logical block 33008, async page read 01:34:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="cf", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 01:34:26 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x163e, 0xbcd2, 0x2, &(0x7f0000000040)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 188.617772][ T879] Buffer I/O error on dev loop5p4, logical block 33008, async page read [ 188.626650][ T879] Buffer I/O error on dev loop5p2, logical block 33008, async page read 01:34:28 executing program 3: syz_read_part_table(0x4000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:28 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:34:28 executing program 1: syz_read_part_table(0x85ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="cf", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 01:34:28 executing program 5: syz_read_part_table(0x54000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:28 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f00006d6000/0x4000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x13}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/232, 0xe8}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005100)=[{{&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, &(0x7f00000013c0)=""/184, 0xb8}, 0x3}, {{&(0x7f0000001480)=@nfc_llcp, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/221, 0xdd}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/149, 0x95}, {&(0x7f00000027c0)=""/244, 0xf4}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/19, 0x13}], 0x7, &(0x7f0000002a40)=""/30, 0x1e}, 0xfffffffe}, {{&(0x7f0000002a80)=@can, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002b00)=""/148, 0x94}, {&(0x7f0000002bc0)=""/168, 0xa8}, {&(0x7f0000002c80)=""/153, 0x99}, {&(0x7f0000002d40)=""/248, 0xf8}], 0x4, &(0x7f0000002e80)=""/79, 0x4f}, 0x800}, {{&(0x7f0000002f00)=@l2tp6, 0x80, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/99, 0x63}, {&(0x7f0000003000)=""/54, 0x36}, {&(0x7f0000003040)=""/35, 0x23}, {&(0x7f0000003080)=""/94, 0x5e}], 0x4, &(0x7f0000003140)=""/34, 0x22}, 0x3}, {{&(0x7f0000003180)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)=""/210, 0xd2}], 0x1, &(0x7f0000003340)=""/64, 0x40}, 0xffffffff}, {{&(0x7f0000003380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003400)=""/13, 0xd}], 0x1, &(0x7f0000003480)=""/58, 0x3a}, 0x8000}, {{&(0x7f00000034c0)=@alg, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003540)=""/15, 0xf}, {&(0x7f0000003580)=""/129, 0x81}, {&(0x7f0000003640)=""/66, 0x42}, {&(0x7f00000036c0)=""/99, 0x63}, {&(0x7f0000003740)=""/14, 0xe}, {&(0x7f0000003780)=""/35, 0x23}, {&(0x7f00000037c0)=""/59, 0x3b}, {&(0x7f0000003800)=""/179, 0xb3}, {&(0x7f00000038c0)=""/191, 0xbf}, {&(0x7f0000003980)=""/110, 0x6e}], 0xa, &(0x7f0000003ac0)=""/238, 0xee}}, {{&(0x7f0000003bc0)=@nfc, 0x80, &(0x7f0000004d40)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/166, 0xa6}, {&(0x7f0000004d00)=""/11, 0xb}], 0x3, &(0x7f0000004d80)=""/47, 0x2f}, 0x9}, {{&(0x7f0000004dc0)=@caif, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e40)=""/111, 0x6f}, {&(0x7f0000004ec0)=""/168, 0xa8}, {&(0x7f0000004f80)=""/113, 0x71}, {&(0x7f0000005000)=""/5, 0x5}], 0x4, &(0x7f0000005080)=""/81, 0x51}, 0x5}], 0x9, 0xdca2f05bc35e529a, 0x0) syz_io_uring_setup(0x5657, &(0x7f0000000100)={0x0, 0xb7e4, 0x29, 0x1, 0x1b1, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 01:34:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="cf", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 190.695303][T24647] loop1: detected capacity change from 0 to 264192 [ 190.703472][T24650] loop5: detected capacity change from 0 to 264192 01:34:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x100000, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x89}, 0x0) io_uring_enter(r1, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x54d2, &(0x7f0000000100)={0x0, 0x3fd1, 0x8, 0x3, 0x2e0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 190.759608][T24650] loop5: p2 p4 [ 190.763241][T24650] loop5: p2 size 327680 extends beyond EOD, truncated [ 190.770810][T24652] loop3: detected capacity change from 0 to 32 [ 190.788864][T24647] loop1: p2 p4 [ 190.792563][T24647] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="cf", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 01:34:28 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r3, 0x5123, 0xc4d1, 0x0, &(0x7f0000000040)={[0x72]}, 0x8) 01:34:28 executing program 5: syz_read_part_table(0x55000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 190.807300][T24650] loop5: p4 size 2097152 extends beyond EOD, truncated [ 190.814754][T24652] loop3: p2 p4 [ 190.818258][T24652] loop3: p2 size 327680 extends beyond EOD, truncated [ 190.831498][T24652] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:28 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffff7, 0x303001) [ 190.853987][T24647] loop1: p4 size 2097152 extends beyond EOD, truncated [ 190.934605][T24652] loop3: detected capacity change from 0 to 32 [ 190.941103][T24696] loop5: detected capacity change from 0 to 264192 [ 190.974701][ T1028] loop5: p2 p4 [ 190.974800][T24652] loop3: p2 p4 [ 190.978295][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 190.981920][T24652] loop3: p2 size 327680 extends beyond EOD, truncated [ 190.989824][T24647] loop1: detected capacity change from 0 to 264192 [ 190.996546][T24652] loop3: p4 size 2097152 extends beyond EOD, truncated [ 191.001964][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 191.017219][T24696] loop5: p2 p4 [ 191.020762][T24696] loop5: p2 size 327680 extends beyond EOD, truncated [ 191.028389][T24696] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:28 executing program 3: syz_read_part_table(0x4800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 191.044453][T24647] loop1: p2 p4 [ 191.048118][T24647] loop1: p2 size 327680 extends beyond EOD, truncated [ 191.054386][ T1028] loop3: p2 p4 [ 191.059144][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 191.068195][T24647] loop1: p4 size 2097152 extends beyond EOD, truncated [ 191.068296][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 191.122241][T24696] loop5: detected capacity change from 0 to 264192 [ 191.139657][T24747] loop3: detected capacity change from 0 to 36 [ 191.146260][T24696] loop5: p2 p4 [ 191.149896][T24696] loop5: p2 size 327680 extends beyond EOD, truncated [ 191.157707][T24696] loop5: p4 size 2097152 extends beyond EOD, truncated [ 191.204565][ T1028] loop3: p2 p4 [ 191.208087][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 191.215729][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 191.223918][T24747] loop3: p2 p4 [ 191.227576][T24747] loop3: p2 size 327680 extends beyond EOD, truncated [ 191.234756][T24747] loop3: p4 size 2097152 extends beyond EOD, truncated [ 191.297479][T24747] loop3: detected capacity change from 0 to 36 [ 191.336749][T24747] loop3: p2 p4 [ 191.340326][T24747] loop3: p2 size 327680 extends beyond EOD, truncated [ 191.353317][T24747] loop3: p4 size 2097152 extends beyond EOD, truncated [ 191.395505][ T1028] loop3: p2 p4 [ 191.399148][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 191.407090][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:31 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:34:31 executing program 4: r0 = syz_io_uring_setup(0x6e7e, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) shutdown(0xffffffffffffffff, 0x1) 01:34:31 executing program 2: eventfd(0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100)={0x0, 0x2710}) 01:34:31 executing program 1: syz_read_part_table(0x8cffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:31 executing program 5: syz_read_part_table(0x60000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:31 executing program 3: syz_read_part_table(0x4c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:31 executing program 2: semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x8, 0x1000}, {}], 0x2, &(0x7f00000002c0)) 01:34:31 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) [ 193.763553][T24800] loop1: detected capacity change from 0 to 264192 [ 193.770410][T24804] loop5: detected capacity change from 0 to 264192 [ 193.770937][T24805] loop3: detected capacity change from 0 to 38 [ 193.804467][T24800] loop1: p2 p4 [ 193.808353][T24800] loop1: p2 size 327680 extends beyond EOD, truncated [ 193.816655][T24800] loop1: p4 size 2097152 extends beyond EOD, truncated [ 193.831159][T24804] loop5: p2 p4 [ 193.839961][T24805] loop3: p2 p4 [ 193.843597][T24805] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:31 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) 01:34:31 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) [ 193.850612][T24804] loop5: p2 size 327680 extends beyond EOD, truncated [ 193.864287][T24804] loop5: p4 size 2097152 extends beyond EOD, truncated [ 193.871544][T24805] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:31 executing program 3: syz_read_part_table(0x5400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:31 executing program 2: semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x8}, {}], 0x2, &(0x7f00000002c0)) [ 193.934972][T24800] loop1: detected capacity change from 0 to 264192 [ 193.966683][T24804] loop5: detected capacity change from 0 to 264192 [ 194.011122][T24800] loop1: p2 p4 [ 194.015156][T24804] loop5: p2 p4 [ 194.016274][T24800] loop1: p2 size 327680 extends beyond EOD, truncated [ 194.028446][T24804] loop5: p2 size 327680 extends beyond EOD, truncated [ 194.028498][T24800] loop1: p4 size 2097152 extends beyond EOD, truncated [ 194.050146][T24854] loop3: detected capacity change from 0 to 42 [ 194.056798][T24804] loop5: p4 size 2097152 extends beyond EOD, truncated [ 194.095112][ T1028] loop3: p2 p4 [ 194.098691][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 194.105979][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 194.114187][T24854] loop3: p2 p4 [ 194.118108][T24854] loop3: p2 size 327680 extends beyond EOD, truncated [ 194.125154][T24854] loop3: p4 size 2097152 extends beyond EOD, truncated [ 194.166955][T24854] loop3: detected capacity change from 0 to 42 [ 194.214409][T24854] loop3: p2 p4 [ 194.218010][T24854] loop3: p2 size 327680 extends beyond EOD, truncated [ 194.225521][T24854] loop3: p4 size 2097152 extends beyond EOD, truncated [ 194.233837][ T1028] loop3: p2 p4 [ 194.237473][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 194.244872][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:34 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:34:34 executing program 4: prctl$PR_GET_TIMERSLACK(0x1e) r0 = gettid() tkill(r0, 0x40) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000200)=""/234, 0xffffffffffffffe3}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000a40)=""/208, 0xd0}, {&(0x7f0000000780)=""/117, 0x75}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000880)=""/231, 0xe7}], 0x9, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x3235cd90, 0x7ff}) r2 = syz_io_uring_setup(0x6e81, &(0x7f0000000100)={0x0, 0x242a, 0x1, 0x20000004}, &(0x7f00006da000/0x4000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0xd91, &(0x7f0000000700)={0x0, 0x9, 0x20, 0x3, 0x3bb, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) ptrace$cont(0x1f, r0, 0x4, 0xff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000d40)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d00)={&(0x7f0000000800)=@xdp={0x2c, 0x1, 0x0, 0x3f}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="74569acf3e1c9357faf1f4468005c7fddf847eb49bb287bb6de76bef3760f3277063df9080d99f51e7ddcaecfd72ac07186466ab42d4e6c685640299b0d276e040cd07042649eb25074b4fc7d2f885a45061efc331c4fc109ad2f1723a2853b078b79b8cff4a2b7b17f955aff6ffbd55f454006cf15db4fa3ea70b1ae21a62f7f0e10929dfe10821d022b18939bbb9bc14cdffe04d41e9985a445ddf3811636993d613b5857d0802f68afee7341b2fb92ee42b8ddf0c74f046d5d7ccf5051cdddaaf72212319d103942a1cc2524beb76ab8728a5e10e39a54d454ddb9d5b7f7c67", 0xe1}, {&(0x7f0000000c40)="ad59335f894eabe56ac880a5c199647e47f917165255ffdb072f87f74f9a7da20a99f34f9a2132fe405ead3710cf29167edab7659230afd278a711a299dd941b5f27c4a4c516b1b3025a", 0x4a}], 0x2}, 0x0, 0x20000000}, 0x3) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:34 executing program 1: syz_read_part_table(0x97ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'sit0\x00', 0x0}) 01:34:34 executing program 5: syz_read_part_table(0x63000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:34 executing program 3: syz_read_part_table(0x5500, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:34 executing program 2: setresuid(0xee01, 0xee01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 01:34:34 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x488502, 0x192) socketpair(0x4, 0x800, 0xb81e, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0, r3, r0, r4, r5, r0, 0xffffffffffffffff, r6, r7, r0], 0xa) r8 = accept4$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x800) close(r8) [ 196.733493][T24922] loop5: detected capacity change from 0 to 264192 [ 196.748146][T24931] loop3: detected capacity change from 0 to 42 01:34:34 executing program 2: clock_gettime(0x4, &(0x7f0000000400)) [ 196.774323][T24922] loop5: p2 p4 [ 196.777945][T24922] loop5: p2 size 327680 extends beyond EOD, truncated [ 196.787608][T24922] loop5: p4 size 2097152 extends beyond EOD, truncated [ 196.798288][T24934] loop1: detected capacity change from 0 to 264192 [ 196.805273][T24931] loop3: p2 p4 [ 196.808968][T24931] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:34 executing program 5: syz_read_part_table(0x68000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:34 executing program 2: getitimer(0x5, &(0x7f0000001000)) 01:34:34 executing program 1: syz_read_part_table(0x9d260000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 196.823944][T24931] loop3: p4 size 2097152 extends beyond EOD, truncated [ 196.844651][T24934] loop1: p2 p4 [ 196.849513][T24934] loop1: p2 size 327680 extends beyond EOD, truncated [ 196.859691][T24934] loop1: p4 size 2097152 extends beyond EOD, truncated [ 196.912104][T24931] loop3: detected capacity change from 0 to 42 [ 196.954769][T24931] loop3: p2 p4 [ 196.956966][T24976] loop5: detected capacity change from 0 to 264192 [ 196.958602][T24931] loop3: p2 size 327680 extends beyond EOD, truncated [ 196.978979][T24931] loop3: p4 size 2097152 extends beyond EOD, truncated [ 196.985574][T24996] loop1: detected capacity change from 0 to 264192 [ 196.994266][T24976] loop5: p2 p4 [ 196.998447][T24976] loop5: p2 size 327680 extends beyond EOD, truncated [ 197.009875][T24976] loop5: p4 size 2097152 extends beyond EOD, truncated [ 197.038627][T24996] loop1: p2 p4 [ 197.042244][T24996] loop1: p2 size 327680 extends beyond EOD, truncated [ 197.049957][T24996] loop1: p4 size 2097152 extends beyond EOD, truncated [ 197.067462][T24976] loop5: detected capacity change from 0 to 264192 [ 197.104480][T24996] loop1: detected capacity change from 0 to 264192 [ 197.104491][T24976] loop5: p2 p4 [ 197.104589][T24976] loop5: p2 size 327680 extends beyond EOD, truncated [ 197.122475][T24976] loop5: p4 size 2097152 extends beyond EOD, truncated [ 197.130801][ T1028] loop5: p2 p4 [ 197.134774][T24996] loop1: p2 p4 [ 197.138316][T24996] loop1: p2 size 327680 extends beyond EOD, truncated [ 197.140642][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 197.153238][T24996] loop1: p4 size 2097152 extends beyond EOD, truncated [ 197.161260][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:37 executing program 1: syz_read_part_table(0xa1ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a1d01"], 0x14}}, 0x0) 01:34:37 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) io_uring_enter(r0, 0x9a1, 0xffd, 0x2, &(0x7f0000000040), 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) 01:34:37 executing program 3: syz_read_part_table(0x6000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:37 executing program 5: syz_read_part_table(0x6c000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:37 executing program 0: setresuid(0xee01, 0xee01, 0xee01) 01:34:37 executing program 2: sysfs$1(0x1, &(0x7f00000000c0)='\x00') 01:34:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) dup2(r0, r1) 01:34:37 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x569c, &(0x7f0000000100)={0x0, 0x469, 0x0, 0x3, 0x17f, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r6 = syz_io_uring_setup(0x4a3d, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x407a, 0x73c3, 0x3, &(0x7f0000003e00)={[0x6]}, 0x8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000029c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd=r5, 0x2, &(0x7f0000002900)=[{&(0x7f0000000340)="994226c9b3c6e109cc4163ff6e9d26a611e709a7cf9a1bbe218de324dbaf06da9027b23d27ae21fdc7a93cc2da114ff0e9fab58cc2a78d2b233f6bd64ae5cfbbaa77ef8eb8c12f3fe17cfc9c8d6281727230ee17c74ffcb8bd3c4f9cee56442217a474420865be4cc0bcd4e23a22854d32b42417b0f3e9eb2761e72cbd17dd1a9770e6d42c1d326719c06a1f7e72db02792dd77ea3e579323ded32ed9586e19a77a475296a0c40d890b5441cb2d2dfd3841da5eb98d5941b368d4c958edcd6b6ab8643ef4f9b1914289fd5918bdae5477448c472c91a7557", 0xd8}, {&(0x7f0000000240)="c9a1692b4df7bacd33a2996b595619b29ace30f4d2decefc23a63e6073e7c1e9b22eacccb9ab2b4ce59622a553390c216d85fe5f1a28d16a515b5bc3e75946b53470319209329f6d67182716ab3e2b46095c636b1a00ff3a6a4a2753f18089ec33292aba2890d16e8aea", 0x6a}, {&(0x7f0000000440)="d4ec2192995be0c2a55b29dc5407109e629be00c260b190cfbac96270496e6cf78ba7b54d53c6be5dd74c3317b5c83a84151296a149c436f7529ec2add4e9053d2e8880d9e1b48d67762572f434bdf2ef4d2d64fa38c33d5afaff2a6c6dd4dd9d1a2a7d1ff8a31299babfe29a0c9797d489cc41603de54e1b3105e4827267cfb4446081cca297a79e9c88694a8179d25eaa542fbd4b6976de2ab7d4f8cb9d170dee7574340eee1835796f5f3d0479bbadddce6dbe0dd70d04b109852b79c00b72042dd", 0xc3}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000002c0)="5200d3a67aaf83d8a9372f7c0b2f6656d52700e3b9c9c46fc2", 0x19}, {&(0x7f0000001540)="884a74b7febdedce23536c12714b9510e61293333208f7a089e1eb02ce7c1079d210e086f7ff68de3fdcbae5330419db3d1432305bcf792fa8ef0eac8f54f4130e661b6999ccbdd225050064b5aec60801fb04192b541db77ea13d2405f1dbaa4c046a26b437948b6cb677eb4b5d57bc159f68f30e0742922a49f1c4d601d58ad1d58935725b51332f5322c142e865753ce0f1a46a44cd25b19cb5e51c1bc1a299103627c90648d794126857007cb07dc4915f4acc6b9bff2eacba812c7a88f2a3d6ca55d445a8e2a9631873ccde1a36ee637601d556863e33cd0c701fd381e10f063605f261f5bc41cf050470e8", 0xee}, {&(0x7f0000001640)="f53a9ceb2893196e497f1cc70aec78273a3f2ff6e8b735a8ad19222e2cc52d6bc49cb2a6e2ee2a867cd3e3ffde3fae1b9e5343385e3e96131723af52c5f263b206211dd714ff09f98af0f5de5126dbf87db526a811a33af44899534597775826342da72681cf3dc05e3d43cebc0a20ebbdac0ed750772d04b201bad0acca597f4134006eda1666569ab1f49b04adc4e2ef8fc4a497e60ff7b8150d24d97ca7e97f0e699768255204857b7842d91665189f4dfd013aad260241b096807712a777e1ef40c384c1915adf713408577501a90fd6f79b366a7d38fc04b7700f6f33e1d855f9e9e3630de6365df0d0fb9df2d831e0c8672490d6", 0xf7}, {&(0x7f0000001740)="8e9982da23e450ec95f93bc0623ca13db0f31abd6251a4a50ced418c4a5238f7f06d4f8ca802ac1fac0d4f5ed9ec99792795253288b93a7c757ef68704584a8838c99b11cf1e1a1953ad274a165fe8bdfb0c7fbd6e6b8220741eaaba7ab97c63992d0ecd310b5fd48a4ea8f55c03b9b85cd91985ffa29beb2c64134ff3902c71ae8f63cdf1337ff0de17cef0000ef0b4d036e1269c695fc82b00d6b956431180e4f9b4", 0xa3}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="265ef81717f2a8b9ab46ae5de88a20d13938566a3762618d223db28075791c09d6da52e43c9eb32259c30cdf53e856cf0a686752956be8758e67996636a17f6887c4421a66349a08950841379abede0926fbe3df4d7dd432e1fbfbc73d1ef2717f03d3b7636d393c945ae7453c4ae8cf3176f6e59d491772a208cedcdd0dbf83fd386146f66a5d60b217ae518154d47933a906afd220ee23b46474f3e0ff6d3be1a29340e2cd083755b90d928924142e0204c2d3ce6a47b73f9cb967d6f219d165d0b384fd0f839b058285be2d32cd0d21662b45b211fe", 0xd7}], 0xa, 0x3, 0x0, {0x3, r9}}, 0x20) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002c00)=0x14) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x810, r11, 0x0) preadv(r11, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r11, 0x264e, 0xe7b1, 0x0, &(0x7f0000002b00)={[0x5]}, 0x8) sendmsg$inet6(r5, &(0x7f0000003d80)={&(0x7f0000002a00)={0xa, 0x4e24, 0x9, @local, 0x5}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000002a40)="19d3cb7cadf483d647eb4f368988c09f625ba133e469f8b6", 0x18}, {&(0x7f0000002a80)="0aba32f50cd7044046f0dc281ec9443ccd0ebfca1a57b160bf6d8377f0b4b2020a69fc12e0a226afade60b87c9785d77f5f04fe21594ff485965965892bef9eeeeb2676eaad5c156e4f6590315c9db0c2f0c6dceb541228fca5e6dc983d14c45cf0bccc3972be6f2f2502d5bced0eb90e5c85c04301ba96851db9d1c", 0x7c}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)="b64dd8ecd990f70ef225ce9a9c4f1e9e1b24bbef8e1a85ce8bc2cde08463c340e6f8", 0x22}], 0x4, &(0x7f0000002c40)=[@rthdr={{0x78, 0x29, 0x39, {0x8, 0xc, 0x0, 0x50, 0x0, [@private2={0xfc, 0x2, [], 0x1}, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r10}}}, @flowinfo={{0x14, 0x29, 0xb, 0xce}}, @dstopts_2292={{0x1030, 0x29, 0x4, {0x2b, 0x202, [], [@generic={0x8, 0x1000, "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"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9b, 0x48, [0x8a]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0xc96c48cff5c69422, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x1140}, 0x20000000) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000003dc0)={0xd293, 0x75, 0x0, 0x423, 0xf, "cee86c296fa6f68bb5dbae587efe907ff3ba5a"}) [ 199.758167][T25052] loop5: detected capacity change from 0 to 264192 [ 199.761552][T25053] loop3: detected capacity change from 0 to 48 [ 199.793302][T25062] loop1: detected capacity change from 0 to 264192 [ 199.814366][T25053] loop3: p2 p4 [ 199.817898][T25053] loop3: p2 size 327680 extends beyond EOD, truncated [ 199.826505][T25053] loop3: p4 size 2097152 extends beyond EOD, truncated [ 199.828279][T25052] loop5: p2 p4 [ 199.842210][T25052] loop5: p2 size 327680 extends beyond EOD, truncated [ 199.850769][T25062] loop1: p2 p4 [ 199.856315][T25062] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:37 executing program 2: setresuid(0xee00, 0x0, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 01:34:37 executing program 4: r0 = syz_io_uring_setup(0x6e81, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f00003b2000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x7a}, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x200100, 0x0, 0x1e}, 0x18) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x8, 0xb9, {0x0, r5}, 0x6, 0x6, 0x1, {0x0, 0x0, r0}}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 01:34:37 executing program 1: syz_read_part_table(0xa5ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:37 executing program 5: syz_read_part_table(0x74000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 199.866995][T25062] loop1: p4 size 2097152 extends beyond EOD, truncated [ 199.897798][T25052] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:37 executing program 0: perf_event_open(&(0x7f0000001100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:37 executing program 3: syz_read_part_table(0x6300, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 01:34:37 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 01:34:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 01:34:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 200.000913][T25117] loop1: detected capacity change from 0 to 264192 [ 200.022847][T25119] loop5: detected capacity change from 0 to 264192 01:34:37 executing program 4: socket(0x10, 0x2, 0x8) 01:34:37 executing program 0: getrandom(&(0x7f0000000040)=""/230, 0xe6, 0x3) [ 200.065894][T25117] loop1: p2 p4 [ 200.070563][T25117] loop1: p2 size 327680 extends beyond EOD, truncated [ 200.078186][T25119] ================================================================== [ 200.086277][T25119] BUG: KCSAN: data-race in lru_add_drain_all / lru_cache_add [ 200.093656][T25119] [ 200.095976][T25119] write to 0xffff888237c26468 of 1 bytes by task 25129 on cpu 0: [ 200.103682][T25119] lru_cache_add+0x74/0x130 [ 200.108192][T25119] shmem_getpage_gfp+0xcf8/0x1410 01:34:37 executing program 0: setresuid(0xee00, 0xee01, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) 01:34:37 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 200.113222][T25119] shmem_file_read_iter+0x1a2/0x5c0 [ 200.118428][T25119] do_iter_readv_writev+0x2e8/0x360 [ 200.123621][T25119] do_iter_read+0x109/0x4b0 [ 200.128118][T25119] vfs_iter_read+0x4c/0x70 [ 200.132538][T25119] loop_queue_work+0xdfb/0x1330 [ 200.137383][T25119] kthread_worker_fn+0x280/0x4d0 [ 200.142316][T25119] loop_kthread_worker_fn+0x3e/0x50 [ 200.147602][T25119] kthread+0x1d0/0x1f0 [ 200.151663][T25119] ret_from_fork+0x1f/0x30 [ 200.156075][T25119] [ 200.158386][T25119] read to 0xffff888237c26468 of 1 bytes by task 25119 on cpu 1: [ 200.165999][T25119] lru_add_drain_all+0x108/0x3c0 [ 200.170944][T25119] invalidate_bdev+0x50/0x70 [ 200.175531][T25119] blk_drop_partitions+0x5e/0x1a0 [ 200.180562][T25119] bdev_disk_changed+0x58/0x200 [ 200.185432][T25119] loop_set_status+0x75f/0x7e0 [ 200.190196][T25119] lo_ioctl+0x758/0x11f0 [ 200.194431][T25119] blkdev_ioctl+0x1d0/0x3c0 [ 200.198929][T25119] block_ioctl+0x6d/0x80 [ 200.203161][T25119] __se_sys_ioctl+0xcb/0x140 [ 200.207744][T25119] __x64_sys_ioctl+0x3f/0x50 [ 200.212486][T25119] do_syscall_64+0x34/0x50 [ 200.216884][T25119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 200.222789][T25119] [ 200.225099][T25119] Reported by Kernel Concurrency Sanitizer on: [ 200.231331][T25119] CPU: 1 PID: 25119 Comm: syz-executor.5 Not tainted 5.12.0-rc8-syzkaller #0 [ 200.235312][T25117] loop1: p4 size 2097152 extends beyond EOD, [ 200.240087][T25119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.240099][T25119] ================================================================== [ 200.244139][T25126] loop3: detected capacity change from 0 to 49 [ 200.246276][T25117] truncated [ 200.287989][T25119] loop5: p2 p4 [ 200.292845][T25119] loop5: p2 size 327680 extends beyond EOD, truncated [ 200.300711][T25126] loop3: p2 p4 [ 200.304685][T25126] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.315171][T25119] loop5: p4 size 2097152 extends beyond EOD, truncated [ 200.318168][T25126] loop3: p4 size 2097152 extends beyond EOD, truncated [ 200.339962][T25117] loop1: detected capacity change from 0 to 264192 01:34:38 executing program 1: syz_read_part_table(0xa6ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:38 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0, 0xfda1}, {0x0}, {0x0, 0xffffffffffffff63}, {0x0}, {0x0, 0x52}, {0x0}, {0x0}], 0x9, 0x0) 01:34:38 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}) [ 200.414793][T25117] loop1: p2 p4 [ 200.430073][T25117] loop1: p2 size 327680 extends beyond EOD, truncated [ 200.439989][T25117] loop1: p4 size 2097152 extends beyond EOD, truncated [ 200.478191][T25126] loop3: detected capacity change from 0 to 49 01:34:38 executing program 3: syz_read_part_table(0x6800, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:38 executing program 4: sysfs$1(0x1, &(0x7f0000000380)='+\x00') 01:34:38 executing program 5: syz_read_part_table(0x7a000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:38 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x16, 0x0) 01:34:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0x173c, 0x4) [ 200.530359][T25126] loop3: p2 p4 [ 200.533968][T25126] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.541475][T25126] loop3: p4 size 2097152 extends beyond EOD, truncated [ 200.550808][T25212] loop1: detected capacity change from 0 to 264192 01:34:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0xee01, 0xffffffffffffffff) 01:34:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xffffffffffffff5d, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}}, 0x0) [ 200.599400][ T1028] loop3: p2 p4 [ 200.602923][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.610307][T25212] loop1: p2 p4 [ 200.614967][T25212] loop1: p2 size 327680 extends beyond EOD, truncated [ 200.622357][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 200.633613][T25212] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, r0) 01:34:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 200.659487][T25232] loop5: detected capacity change from 0 to 264192 [ 200.689631][T25212] loop1: detected capacity change from 0 to 264192 01:34:38 executing program 1: syz_read_part_table(0xa9ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="b6", 0x1}], 0x300, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) recvmsg(r1, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000003c80)=[{0x0}, {&(0x7f0000001900)=""/4, 0x4}, {&(0x7f0000001940)=""/163, 0xa3}], 0x3, &(0x7f0000003d40)=""/4096, 0x1000}, 0x100) 01:34:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) [ 200.724474][T25232] loop5: p2 p4 [ 200.725934][T25258] loop3: detected capacity change from 0 to 52 [ 200.728128][T25232] loop5: p2 size 327680 extends beyond EOD, truncated [ 200.741727][T25232] loop5: p4 size 2097152 extends beyond EOD, truncated [ 200.749104][T25258] loop3: p2 p4 [ 200.752732][T25258] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.761349][T25258] loop3: p4 size 2097152 extends beyond EOD, truncated [ 200.817126][T25232] loop5: detected capacity change from 0 to 264192 [ 200.831134][T25258] loop3: detected capacity change from 0 to 52 [ 200.837422][T25278] loop1: detected capacity change from 0 to 264192 [ 200.884316][T25232] loop5: p2 p4 [ 200.887949][T25232] loop5: p2 size 327680 extends beyond EOD, truncated [ 200.895175][T25258] loop3: p2 p4 [ 200.899884][T25258] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.901013][T25232] loop5: p4 size 2097152 extends beyond EOD, truncated [ 200.909032][T25278] loop1: p2 p4 [ 200.915012][T25258] loop3: p4 size 2097152 extends beyond EOD, truncated [ 200.918101][T25278] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:38 executing program 3: syz_read_part_table(0x6c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 01:34:38 executing program 5: syz_read_part_table(0x80040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 200.932067][T25278] loop1: p4 size 2097152 extends beyond EOD, truncated [ 200.939375][ T1028] loop5: p2 p4 [ 200.942870][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 200.950593][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:38 executing program 1: syz_read_part_table(0xb38dd0d4, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 200.974839][ T1028] loop3: p2 p4 [ 200.978405][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 200.985709][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 201.014146][T25331] loop5: detected capacity change from 0 to 264192 [ 201.020262][T25334] loop1: detected capacity change from 0 to 264192 [ 201.064229][T25331] loop5: p2 p4 [ 201.067771][T25331] loop5: p2 size 327680 extends beyond EOD, truncated [ 201.075308][T25331] loop5: p4 size 2097152 extends beyond EOD, truncated [ 201.084700][T25334] loop1: p2 p4 [ 201.088484][T25334] loop1: p2 size 327680 extends beyond EOD, truncated [ 201.103209][T25349] loop3: detected capacity change from 0 to 54 [ 201.104554][T25334] loop1: p4 size 2097152 extends beyond EOD, truncated [ 201.134253][T25349] loop3: p2 p4 [ 201.138521][T25349] loop3: p2 size 327680 extends beyond EOD, truncated [ 201.141214][T25331] loop5: detected capacity change from 0 to 264192 [ 201.146968][T25349] loop3: p4 size 2097152 extends beyond EOD, truncated [ 201.165396][T25334] loop1: detected capacity change from 0 to 264192 [ 201.174497][T25331] loop5: p2 p4 [ 201.178095][T25331] loop5: p2 size 327680 extends beyond EOD, truncated [ 201.185455][T25331] loop5: p4 size 2097152 extends beyond EOD, truncated [ 201.196821][T25063] print_req_error: 186 callbacks suppressed [ 201.196833][T25063] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 201.213621][T25349] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 201.214857][ T703] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.221590][T25334] loop1: p2 p4 [ 201.231793][ T703] buffer_io_error: 88 callbacks suppressed [ 201.231802][ T703] Buffer I/O error on dev loop3p4, logical block 4, async page read [ 201.247643][T25349] loop3: detected capacity change from 0 to 54 [ 201.250967][ T703] blk_update_request: I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.256070][T25334] loop1: p2 size 327680 extends beyond EOD, truncated [ 201.266106][ T703] Buffer I/O error on dev loop3p4, logical block 5, async page read [ 201.266734][ T703] blk_update_request: I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.274078][T25334] loop1: p4 size 2097152 extends beyond EOD, [ 201.280909][ T703] Buffer I/O error on dev loop3p4, logical block 6, async page read [ 201.291940][T25334] truncated [ 201.298593][ T703] blk_update_request: I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.306184][ T1028] loop5: p2 p4 [ 201.309131][ T703] Buffer I/O error on dev loop3p4, logical block 7, async page read [ 201.333913][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 201.341382][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 201.355014][T25349] loop3: p2 p4 [ 201.358691][T25349] loop3: p2 size 327680 extends beyond EOD, truncated [ 201.366194][T25349] loop3: p4 size 2097152 extends beyond EOD, truncated [ 201.409386][ T1028] loop3: p2 p4 [ 201.412927][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 201.420699][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:39 executing program 0: clock_gettime(0x99d88839b97c84f2, 0x0) 01:34:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 01:34:39 executing program 5: syz_read_part_table(0x80ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 1: syz_read_part_table(0xbfffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 4: setresuid(0xee00, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 01:34:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3f) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x0) 01:34:39 executing program 3: syz_read_part_table(0x7400, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 01:34:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x10000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup3(r2, r0, 0x0) [ 201.575340][T25426] loop1: detected capacity change from 0 to 264192 [ 201.610175][T25425] loop5: detected capacity change from 0 to 264192 01:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 0: setitimer(0x2, &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f00000001c0)) [ 201.631803][T25443] loop3: detected capacity change from 0 to 58 [ 201.639931][T25426] loop1: p2 p4 [ 201.643541][T25426] loop1: p2 size 327680 extends beyond EOD, truncated [ 201.654279][T25425] loop5: p2 p4 [ 201.658524][T25426] loop1: p4 size 2097152 extends beyond EOD, truncated [ 201.659479][T25425] loop5: p2 size 327680 extends beyond EOD, truncated [ 201.674315][T25443] loop3: p2 p4 01:34:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x1c}}, 0x0) 01:34:39 executing program 0: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='b', 0x1, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r0) 01:34:39 executing program 2: perf_event_open(&(0x7f0000001100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:39 executing program 5: syz_read_part_table(0x81ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 201.685451][T25443] loop3: p2 size 327680 extends beyond EOD, truncated [ 201.698078][T25425] loop5: p4 size 2097152 extends beyond EOD, truncated [ 201.713605][T25443] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:39 executing program 1: syz_read_part_table(0xc9ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_MARK_MASK, @CTA_LABELS={0x0, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x7}]}]}, 0xfffffddb}}, 0x0) 01:34:39 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 201.772045][T25443] loop3: detected capacity change from 0 to 58 [ 201.827336][T25443] loop3: p2 p4 [ 201.831080][T25443] loop3: p2 size 327680 extends beyond EOD, truncated [ 201.838459][T25443] loop3: p4 size 2097152 extends beyond EOD, truncated [ 201.846068][T25489] loop5: detected capacity change from 0 to 264192 [ 201.864039][T25490] loop1: detected capacity change from 0 to 264192 01:34:39 executing program 3: syz_read_part_table(0x7a00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:39 executing program 0: getresuid(&(0x7f0000002100), &(0x7f0000000040), &(0x7f0000000080)) 01:34:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0x4}]}, 0x18}}, 0x0) [ 201.904272][T25490] loop1: p2 p4 [ 201.908388][T25490] loop1: p2 size 327680 extends beyond EOD, truncated [ 201.917169][T25490] loop1: p4 size 2097152 extends beyond EOD, truncated [ 201.924579][T25489] loop5: p2 p4 [ 201.929563][T25489] loop5: p2 size 327680 extends beyond EOD, truncated [ 201.938006][ T1028] loop1: p2 p4 [ 201.941979][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 201.950040][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 201.956287][T25489] loop5: p4 size 2097152 extends beyond EOD, truncated [ 202.018496][T25524] loop3: detected capacity change from 0 to 61 [ 202.054119][T25524] loop3: p2 p4 [ 202.057699][T25524] loop3: p2 size 327680 extends beyond EOD, truncated [ 202.080646][T25524] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:40 executing program 4: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\\,\x00', 0xffffffffffffffff) 01:34:40 executing program 2: setresuid(0xee01, 0xee01, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) 01:34:40 executing program 1: syz_read_part_table(0xd4d08db3, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 0: perf_event_open(&(0x7f0000001100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:34:40 executing program 5: syz_read_part_table(0x82ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 3: syz_read_part_table(0x8004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 4: r0 = fork() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/97, 0x61}], 0x1, 0x0) 01:34:40 executing program 2: clock_gettime(0x7, &(0x7f0000000340)) 01:34:40 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/15, 0xf}], 0x1, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 202.589763][T25565] loop3: detected capacity change from 0 to 64 [ 202.597766][T25566] loop1: detected capacity change from 0 to 264192 [ 202.622576][T25570] loop5: detected capacity change from 0 to 264192 01:34:40 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="e7", 0x1}, {&(0x7f00000000c0)="c8", 0x1}, {&(0x7f0000000100)="9c", 0x1}], 0x3, &(0x7f0000005700)=ANY=[@ANYBLOB="780000000000000014010000ff0000003942ec903a5d7a0ca3d7d5397d90999fc85e9d9e14b80736db13eb588026b567d7b97a67b45ad6c9f4bfc4d0b9e4fc902191b8357e2ad67acb230c4a34f086111ef6e5a94c758f3224f72cd7a33611612619d74bd7d6ac6863ecc386c9097a4a1e378826db6900001001000000000000000000006d000000d73efadc81cd0c4aed1243ee0f7dd07d7ed39c9c8a7767237e77279c5b037b3cf750a856d69b65a95b70670978dfa94a7ba76d46103cfda3bd90296ab610f80f08a20bb9556f05821df36d447a3aa85df953d241515e95ecc13282e348c273e16c3f68a4872de3dfe46df7559d4bf018443a8445e14aabcfada4f17901ff9f6c71aa2af56e80853792decb62d59b1205cb875f0b7f5a872752a6871c22ee2834730bb2e789bf6193d03dceab1bbccb2581d0177e1c346c93b5eb7d82df33b291d323a7dee9cb3f1bcbabb019b47638d9f560d057635f5ff41d520328d7a9f8caabc554dcd82b57065b0441ed5f76b8638491fd6043847bbd97f9834200000000b8000000000000001301000003000000a40ede3d7747e18de54cb6143f1c5059060dac88c59ebff1648c04b5b6277007e6a119dc279070c4aff0a695ae5d5014a9cbdccc4078cfd1e3681318ee9a33c99608f743532766f14f0561f13bbf6e7f205d000000000000000048e7be4a6b7af36f97cebf7e83e5b4879ccd6f1ed69132ef70e493114100aaa11fff9b39110d498534b713e859167bddace6b8198b8e8dfde9623a720e208933f0d2e8a980cb398100000000000098000000000000000b010000fa0f00009b8866adb4f571192e7a25464ece361cf7cf176c676bf29b47608ef7e7547f5ec99a0727f1ff774e21abaa173c5260514cd29f24008ab98e10ebe55ae522cee87b032d40d994da8c28d55602984905971f976616182039a9206a32078ed2417b966269de972174d8021f9e82343f15971c7c1257e0784bafdee84936502b455a94ff1378bc1238001800000000000000880000251bffffff6d000000000000000001"], 0x3f0}}, {{&(0x7f0000000980)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=[{0x10}], 0x10}}], 0x2, 0x0) 01:34:40 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "3ce6c506bab94584c0b2c443cfe589d44317e7cdcd24245c9f09ca597f8c72020f7ce17093684b593ce24cb989fd2a159767bbc007d8e91f15887116a25b9241"}, 0x48, 0xffffffffffffffff) [ 202.654352][T25565] loop3: p2 p4 [ 202.657889][T25565] loop3: p2 size 327680 extends beyond EOD, truncated [ 202.664851][T25570] loop5: p2 p4 [ 202.669240][T25570] loop5: p2 size 327680 extends beyond EOD, truncated [ 202.672767][T25566] loop1: p2 p4 [ 202.679784][T25566] loop1: p2 size 327680 extends beyond EOD, truncated [ 202.679902][T25570] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:40 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:40 executing program 0: socketpair(0xa, 0x2, 0x73, &(0x7f0000000300)) [ 202.699011][T25565] loop3: p4 size 2097152 extends beyond EOD, truncated [ 202.707154][T25566] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:40 executing program 5: syz_read_part_table(0x85ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 1: syz_read_part_table(0xe4ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x4000000, 0x0, 0xe000000) [ 202.775444][T25613] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.785015][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.811141][T25566] loop1: detected capacity change from 0 to 264192 01:34:40 executing program 0: open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) [ 202.828406][T25565] loop3: detected capacity change from 0 to 64 [ 202.861786][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:34:40 executing program 3: syz_read_part_table(0x9000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:40 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002700)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:34:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 202.872258][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.892188][T25565] loop3: p2 p4 [ 202.901506][T25565] loop3: p2 size 327680 extends beyond EOD, truncated [ 202.910648][T25565] loop3: p4 size 2097152 extends beyond EOD, truncated [ 202.912263][T25641] loop5: detected capacity change from 0 to 264192 [ 202.966327][T25641] loop5: p2 p4 [ 202.969917][T25641] loop5: p2 size 327680 extends beyond EOD, truncated [ 202.995553][T25641] loop5: p4 size 2097152 extends beyond EOD, truncated [ 202.995715][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:34:40 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) 01:34:40 executing program 2: waitid(0x0, 0x0, 0x0, 0x16194c2fd5b6c6e9, 0x0) 01:34:40 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.016530][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.031248][T25664] loop1: detected capacity change from 0 to 264192 01:34:40 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:40 executing program 5: syz_read_part_table(0x8cffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 203.069012][T25678] loop3: detected capacity change from 0 to 72 [ 203.089312][T25689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.094468][T25664] loop1: p2 p4 [ 203.099105][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.112645][T25678] loop3: p2 p4 [ 203.116424][T25678] loop3: p2 size 327680 extends beyond EOD, truncated [ 203.123331][T25664] loop1: p2 size 327680 extends beyond EOD, truncated [ 203.137614][T25678] loop3: p4 size 2097152 extends beyond EOD, truncated [ 203.152987][T25664] loop1: p4 size 2097152 extends beyond EOD, truncated [ 203.166635][T25703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.197108][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.201072][T25705] loop5: detected capacity change from 0 to 264192 [ 203.226596][T25678] loop3: detected capacity change from 0 to 72 [ 203.234793][T25705] loop5: p2 p4 [ 203.238298][T25705] loop5: p2 size 327680 extends beyond EOD, truncated [ 203.244356][T25664] loop1: detected capacity change from 0 to 264192 [ 203.246310][T25705] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:41 executing program 1: syz_read_part_table(0xed0b0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:41 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = getpid() tkill(r2, 0x14) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.275483][T25678] loop3: p2 p4 [ 203.279041][T25678] loop3: p2 size 327680 extends beyond EOD, truncated [ 203.287044][T25678] loop3: p4 size 2097152 extends beyond EOD, truncated [ 203.297679][T25664] loop1: p2 p4 [ 203.303860][T25664] loop1: p2 size 327680 extends beyond EOD, truncated [ 203.304602][T25705] loop5: detected capacity change from 0 to 264192 [ 203.317871][T25664] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:41 executing program 3: syz_read_part_table(0xa926, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:41 executing program 5: syz_read_part_table(0x97ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 203.370341][T25705] loop5: p2 p4 [ 203.374283][ T1028] loop3: p2 p4 [ 203.374346][T25705] loop5: p2 size 327680 extends beyond EOD, truncated [ 203.378445][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 203.385495][T25705] loop5: p4 size 2097152 extends beyond EOD, truncated [ 203.393822][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 203.438289][T25760] loop1: detected capacity change from 0 to 264192 01:34:41 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.504516][T25760] loop1: p2 p4 [ 203.508436][T25760] loop1: p2 size 327680 extends beyond EOD, truncated [ 203.515862][T25760] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.551667][T25780] loop3: detected capacity change from 0 to 84 [ 203.558482][T25782] loop5: detected capacity change from 0 to 264192 [ 203.584136][T25780] loop3: p2 p4 [ 203.587701][T25780] loop3: p2 size 327680 extends beyond EOD, truncated [ 203.594836][ T1028] loop5: p2 p4 01:34:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 203.598839][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 203.600401][T25760] loop1: detected capacity change from 0 to 264192 [ 203.615654][T25780] loop3: p4 size 2097152 extends beyond EOD, truncated [ 203.625841][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 203.641893][T25782] loop5: p2 p4 [ 203.645541][T25782] loop5: p2 size 327680 extends beyond EOD, truncated [ 203.654805][T25760] loop1: p2 p4 [ 203.658465][T25760] loop1: p2 size 327680 extends beyond EOD, truncated [ 203.661512][T25782] loop5: p4 size 2097152 extends beyond EOD, truncated [ 203.672555][T25760] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:41 executing program 1: syz_read_part_table(0xee0b0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 203.696126][T25590] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 203.697643][T25780] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 203.723105][ T703] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.734304][ T703] Buffer I/O error on dev loop3p2, logical block 2, async page read [ 203.742459][ T703] blk_update_request: I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.753579][ T703] Buffer I/O error on dev loop3p2, logical block 3, async page read [ 203.755209][T25780] loop3: detected capacity change from 0 to 84 [ 203.774534][T25782] loop5: detected capacity change from 0 to 264192 [ 203.815518][T25780] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 203.823686][T25782] loop5: p2 p4 [ 203.828529][T25782] loop5: p2 size 327680 extends beyond EOD, truncated [ 203.839984][T25824] loop1: detected capacity change from 0 to 264192 [ 203.842182][T25782] loop5: p4 size 2097152 extends beyond EOD, truncated [ 203.877835][T25824] loop1: p2 p4 [ 203.882892][T25824] loop1: p2 size 327680 extends beyond EOD, truncated [ 203.892642][T25824] loop1: p4 size 2097152 extends beyond EOD, truncated [ 203.936422][T25824] loop1: detected capacity change from 0 to 264192 01:34:41 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = getpid() tkill(r2, 0x14) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:41 executing program 3: syz_read_part_table(0xf504, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:41 executing program 5: syz_read_part_table(0x98260000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:41 executing program 1: syz_read_part_table(0xeeffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 203.988463][T25824] loop1: p2 p4 [ 203.997905][T25824] loop1: p2 size 327680 extends beyond EOD, truncated [ 204.007989][T25824] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:41 executing program 0: r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000001780)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 01:34:41 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 204.100291][T25887] loop1: detected capacity change from 0 to 264192 [ 204.131684][T25893] loop3: detected capacity change from 0 to 122 [ 204.146399][T25887] loop1: p2 p4 [ 204.150324][T25887] loop1: p2 size 327680 extends beyond EOD, truncated [ 204.160098][T25895] loop5: detected capacity change from 0 to 264192 [ 204.166964][T25887] loop1: p4 size 2097152 extends beyond EOD, truncated [ 204.184332][T25893] loop3: p2 p4 [ 204.189076][T25893] loop3: p2 size 327680 extends beyond EOD, truncated [ 204.201134][T25895] loop5: p2 p4 [ 204.205648][T25893] loop3: p4 size 2097152 extends beyond EOD, truncated [ 204.212414][T25895] loop5: p2 size 327680 extends beyond EOD, truncated [ 204.222683][T25588] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.226952][T25849] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:42 executing program 0: getresgid(&(0x7f0000000fc0), 0x0, 0x0) 01:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 204.234561][ T879] Buffer I/O error on dev loop1p2, logical block 33008, async page read [ 204.254132][T25887] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 204.273871][T25887] loop1: detected capacity change from 0 to 264192 [ 204.277959][T25895] loop5: p4 size 2097152 extends beyond EOD, truncated [ 204.300698][T25893] loop3: detected capacity change from 0 to 122 01:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x0, [@remote]}, @lsrr={0x83, 0x7, 0x0, [@private]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) [ 204.325336][T25887] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 204.340170][ T1028] loop3: p2 p4 [ 204.343797][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 204.359280][T25895] loop5: detected capacity change from 0 to 264192 [ 204.366042][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 204.377409][T25893] loop3: p2 p4 [ 204.380989][T25893] loop3: p2 size 327680 extends beyond EOD, truncated [ 204.392175][T25893] loop3: p4 size 2097152 extends beyond EOD, truncated [ 204.414325][T25895] loop5: p2 p4 [ 204.417907][T25895] loop5: p2 size 327680 extends beyond EOD, truncated [ 204.431614][T25895] loop5: p4 size 2097152 extends beyond EOD, truncated [ 204.475128][ T1028] loop5: p2 p4 [ 204.478815][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 204.487635][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001400)=[{&(0x7f00000002c0)="07d6", 0x2}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "bc7c"}, @timestamp_addr={0x44, 0x4, 0xd7}]}}}], 0x38}, 0x0) 01:34:42 executing program 1: syz_read_part_table(0xf5040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:42 executing program 3: syz_read_part_table(0xff0f, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:42 executing program 5: syz_read_part_table(0xa1ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1801000003010104000000000000000007000003780001"], 0x118}}, 0x0) 01:34:42 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x0) 01:34:42 executing program 0: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) sched_rr_get_interval(0x0, &(0x7f0000000000)) 01:34:42 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 204.666817][T25993] loop3: detected capacity change from 0 to 127 01:34:42 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:42 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') [ 204.707176][T25993] loop3: p2 p4 [ 204.710702][T25993] loop3: p2 size 327680 extends beyond EOD, truncated [ 204.720446][T25996] loop1: detected capacity change from 0 to 264192 [ 204.738291][T25993] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000180)=@random={'security.', '/\x00'}) [ 204.753989][T25999] loop5: detected capacity change from 0 to 264192 [ 204.764474][T25996] loop1: p2 p4 [ 204.768203][T25996] loop1: p2 size 327680 extends beyond EOD, truncated [ 204.784218][T25996] loop1: p4 size 2097152 extends beyond EOD, truncated [ 204.802517][T25999] loop5: p2 p4 01:34:42 executing program 2: syz_io_uring_setup(0x6ccd, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) 01:34:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 204.817203][T25999] loop5: p2 size 327680 extends beyond EOD, truncated [ 204.838420][T25993] loop3: detected capacity change from 0 to 127 [ 204.845628][T25999] loop5: p4 size 2097152 extends beyond EOD, truncated [ 204.864148][T25993] loop3: p2 p4 [ 204.868339][T25993] loop3: p2 size 327680 extends beyond EOD, truncated [ 204.882420][T25996] loop1: detected capacity change from 0 to 264192 [ 204.895116][T25999] loop5: detected capacity change from 0 to 264192 [ 204.904666][T25993] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:42 executing program 1: syz_read_part_table(0xf6ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:42 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 01:34:42 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$setperm(0x5, r0, 0x0) 01:34:42 executing program 3: syz_read_part_table(0x20000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:42 executing program 5: syz_read_part_table(0xa5ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 204.944126][T25996] loop1: p2 p4 [ 204.944245][T25999] loop5: p2 p4 [ 204.947703][T25996] loop1: p2 size 327680 extends beyond EOD, truncated [ 204.951569][T25999] loop5: p2 size 327680 extends beyond EOD, truncated [ 204.958353][T25996] loop1: p4 size 2097152 extends beyond EOD, truncated [ 204.972886][ T1028] loop3: p2 p4 [ 204.976042][T25999] loop5: p4 size 2097152 extends beyond EOD, truncated [ 204.978168][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:42 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 01:34:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 01:34:42 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 204.991084][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:42 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 01:34:42 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 205.055900][ T703] Buffer I/O error on dev loop5p2, logical block 33008, async page read [ 205.055930][ T1778] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 205.064285][ T703] Buffer I/O error on dev loop5p4, logical block 33008, async page read [ 205.081508][T26082] loop5: detected capacity change from 0 to 264192 01:34:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 205.127281][T26082] loop5: p2 p4 [ 205.130834][T26082] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.137518][T26099] loop1: detected capacity change from 0 to 264192 [ 205.149314][T26096] loop3: detected capacity change from 0 to 256 [ 205.162377][T26082] loop5: p4 size 2097152 extends beyond EOD, truncated [ 205.184153][T26099] loop1: p2 p4 [ 205.188976][T26099] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.196581][T26096] loop3: p2 p4 [ 205.197120][T26099] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.200239][T26096] loop3: p2 size 327680 extends beyond EOD, truncated [ 205.219533][T26096] loop3: p4 size 2097152 extends beyond EOD, truncated [ 205.234238][T26082] loop5: detected capacity change from 0 to 264192 [ 205.264278][T26082] loop5: p2 p4 [ 205.269105][T26082] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.269287][T26099] loop1: detected capacity change from 0 to 264192 [ 205.277161][T26096] loop3: detected capacity change from 0 to 256 [ 205.283942][T26082] loop5: p4 size 2097152 extends beyond EOD, truncated [ 205.296707][ T1028] loop5: p2 p4 [ 205.300206][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.307190][T26099] loop1: p2 p4 [ 205.310675][T26099] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.312690][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 205.318606][T26099] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.331585][T26096] loop3: p2 p4 01:34:43 executing program 1: syz_read_part_table(0xfbffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 01:34:43 executing program 3: syz_read_part_table(0x40000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 5: syz_read_part_table(0xa6ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+'}, 0x16, 0x0) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 205.335634][T26096] loop3: p2 size 327680 extends beyond EOD, truncated [ 205.343691][T26096] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:43 executing program 2: request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/\xa3!-\xdb[,-\xbd\x00', 0xfffffffffffffffa) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 205.451587][T26168] loop1: detected capacity change from 0 to 264192 [ 205.504143][T26168] loop1: p2 p4 [ 205.507805][T26168] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.522327][T26180] loop5: detected capacity change from 0 to 264192 [ 205.528112][T26168] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.536839][T26200] loop3: detected capacity change from 0 to 512 [ 205.547051][ T1028] loop1: p2 p4 [ 205.551208][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.558519][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.574105][T26200] loop3: p2 p4 [ 205.574119][T26180] loop5: p2 p4 [ 205.574166][T26180] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.577742][T26200] loop3: p2 size 327680 extends beyond EOD, [ 205.581545][T26180] loop5: p4 size 2097152 extends beyond EOD, [ 205.587896][T26200] truncated 01:34:43 executing program 1: syz_read_part_table(0xfdfdffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 01:34:43 executing program 2: r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000200)='smaps\x00') [ 205.590858][T26200] loop3: p4 size 2097152 extends beyond EOD, [ 205.593892][T26180] truncated [ 205.612202][T26200] truncated [ 205.629031][T26180] loop5: detected capacity change from 0 to 264192 [ 205.674705][T26180] loop5: p2 p4 [ 205.678444][T26180] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.685401][T26200] loop3: detected capacity change from 0 to 512 [ 205.692582][T26180] loop5: p4 size 2097152 extends beyond EOD, truncated [ 205.698097][T26249] loop1: detected capacity change from 0 to 264192 [ 205.708125][ T1028] loop5: p2 p4 [ 205.711649][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated 01:34:43 executing program 3: syz_read_part_table(0x80000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000025c0)='limits\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 01:34:43 executing program 5: syz_read_part_table(0xa9ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 205.719237][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 205.735236][T26200] loop3: p2 p4 [ 205.738745][T26200] loop3: p2 size 327680 extends beyond EOD, truncated [ 205.746586][T26200] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 205.781142][T26249] loop1: p2 p4 [ 205.784897][T26249] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.792618][T26249] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.793909][ T1028] loop3: p2 p4 [ 205.813365][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:43 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001480)=[{0xfffffffffffffffd}], 0x1, 0x0) [ 205.828836][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 205.835649][T26279] loop5: detected capacity change from 0 to 264192 [ 205.853967][T26249] loop1: detected capacity change from 0 to 264192 [ 205.864055][T26279] loop5: p2 p4 [ 205.867592][T26279] loop5: p2 size 327680 extends beyond EOD, truncated [ 205.874946][T26279] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:43 executing program 1: syz_read_part_table(0xfdffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 01:34:43 executing program 2: openat$urandom(0xffffffffffffff9c, 0x0, 0x503400, 0x0) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 205.904051][T26249] loop1: p2 p4 [ 205.907660][T26249] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.916338][T26249] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.925810][ T1028] loop1: p2 p4 [ 205.929339][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 205.938977][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 205.946151][T26279] loop5: detected capacity change from 0 to 264192 [ 205.952879][T26315] loop3: detected capacity change from 0 to 1024 [ 205.997610][T26315] loop3: p2 p4 [ 206.003280][T26279] loop5: p2 p4 [ 206.006823][T26279] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.013962][T26315] loop3: p2 size 327680 extends beyond EOD, truncated [ 206.020713][T26279] loop5: p4 size 2097152 extends beyond EOD, truncated [ 206.021340][T26315] loop3: p4 size 2097152 extends beyond EOD, truncated [ 206.036264][ T1028] loop3: p2 p4 [ 206.039927][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:43 executing program 3: syz_read_part_table(0x80040, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:43 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) signalfd4(r0, &(0x7f0000000400), 0x8, 0x0) 01:34:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 5: syz_read_part_table(0xb38dd0d4, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 206.045158][T26341] loop1: detected capacity change from 0 to 264192 [ 206.048179][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 206.084103][T26341] loop1: p2 p4 [ 206.088390][T26341] loop1: p2 size 327680 extends beyond EOD, truncated 01:34:43 executing program 2: msgsnd(0x0, &(0x7f0000000000)={0x6, "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"}, 0xfd1, 0x0) [ 206.097632][T26341] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:43 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 206.155536][T26341] loop1: detected capacity change from 0 to 264192 [ 206.174298][T26371] loop5: detected capacity change from 0 to 264192 [ 206.202434][T26380] loop3: detected capacity change from 0 to 1024 [ 206.209310][T26371] loop5: p2 p4 [ 206.212817][T26341] loop1: p2 p4 [ 206.214058][T26371] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.216439][T26341] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.227695][T26371] loop5: p4 size 2097152 extends beyond EOD, truncated [ 206.237737][T26341] loop1: p4 size 2097152 extends beyond EOD, truncated [ 206.246387][ T1028] loop1: p2 p4 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8}, 0x0) 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:44 executing program 1: syz_read_part_table(0xfeffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) [ 206.249879][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.265410][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 206.274655][T26380] loop3: p2 p4 [ 206.278243][T26380] loop3: p2 size 327680 extends beyond EOD, truncated [ 206.287482][T26380] loop3: p4 size 2097152 extends beyond EOD, truncated [ 206.344462][T26371] loop5: detected capacity change from 0 to 264192 [ 206.351216][T26380] loop3: detected capacity change from 0 to 1024 [ 206.362908][T26427] loop1: detected capacity change from 0 to 264192 [ 206.384245][T26371] loop5: p2 p4 [ 206.387902][T26371] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.395300][T26371] loop5: p4 size 2097152 extends beyond EOD, truncated [ 206.406039][T26380] loop3: p2 p4 [ 206.409560][T26427] loop1: p2 p4 [ 206.413107][T26427] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.421016][T26380] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:44 executing program 3: syz_read_part_table(0x100000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8}, 0x0) 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:44 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 01:34:44 executing program 5: syz_read_part_table(0xbfffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:44 executing program 1: syz_read_part_table(0xff0f0000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 206.447136][T26380] loop3: p4 size 2097152 extends beyond EOD, truncated [ 206.459987][T26427] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8}, 0x0) 01:34:44 executing program 2: syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) [ 206.504649][ T1028] loop3: p2 p4 [ 206.508288][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 206.515353][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x8}, 0x0) 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 206.572406][T26480] loop5: detected capacity change from 0 to 264192 [ 206.576349][T26482] loop1: detected capacity change from 0 to 264192 [ 206.606562][T25587] print_req_error: 5 callbacks suppressed 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 206.606627][T25587] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 206.628274][T25849] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 206.633958][ T1783] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 206.639847][ T703] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.657965][ T703] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 206.666519][T26480] loop5: p2 p4 [ 206.670099][T26482] loop1: p2 p4 [ 206.684068][T26482] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.691874][ T703] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.697749][T26480] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.702751][ T703] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 206.730399][T26482] loop1: p4 size 2097152 extends beyond EOD, truncated [ 206.739783][T26480] loop5: p4 size 2097152 extends beyond EOD, truncated [ 206.748720][T26507] loop3: detected capacity change from 0 to 2048 [ 206.814482][T26507] loop3: p2 p4 [ 206.820382][T26507] loop3: p2 size 327680 extends beyond EOD, truncated [ 206.828328][T26507] loop3: p4 size 2097152 extends beyond EOD, truncated [ 206.830840][T26480] loop5: detected capacity change from 0 to 264192 [ 206.835258][T26482] loop1: detected capacity change from 0 to 264192 [ 206.864090][T26480] loop5: p2 p4 [ 206.867691][T26480] loop5: p2 size 327680 extends beyond EOD, truncated [ 206.875343][T26480] loop5: p4 size 2097152 extends beyond EOD, truncated [ 206.884593][T26482] loop1: p2 p4 [ 206.888172][T26482] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.892630][T26507] loop3: detected capacity change from 0 to 2048 [ 206.895675][T26482] loop1: p4 size 2097152 extends beyond EOD, truncated [ 206.909724][ T1028] loop1: p2 p4 [ 206.913204][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 206.921008][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 206.936070][T26507] loop3: p2 p4 [ 206.939892][T26507] loop3: p2 size 327680 extends beyond EOD, truncated [ 206.947413][T26507] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:44 executing program 3: syz_read_part_table(0x200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:44 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/6) 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x8}, 0x0) 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:44 executing program 5: syz_read_part_table(0xc9ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:44 executing program 1: syz_read_part_table(0xffefffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 206.996136][T25588] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 207.008745][ T1789] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 207.009034][T25577] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 207.022460][ T879] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x8}, 0x0) [ 207.038746][ T879] Buffer I/O error on dev loop1p2, logical block 33008, async page read [ 207.049476][ T1028] loop3: p2 p4 [ 207.053066][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.063979][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.076676][T26576] loop5: detected capacity change from 0 to 264192 [ 207.084080][T26579] loop1: detected capacity change from 0 to 264192 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12}, 0x10}, 0x8}, 0x0) 01:34:44 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:44 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/6) [ 207.084209][ T879] blk_update_request: I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.101970][ T879] Buffer I/O error on dev loop1p4, logical block 33008, async page read [ 207.114376][T26576] loop5: p2 p4 [ 207.117957][T26576] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.139488][T26576] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12}, 0x10}, 0x8}, 0x0) 01:34:45 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 207.171561][ T1028] loop1: p2 p4 [ 207.175246][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.189975][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 207.199463][T26579] loop1: p2 p4 [ 207.203029][T26579] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.206447][T26576] loop5: detected capacity change from 0 to 264192 [ 207.211250][T26579] loop1: p4 size 2097152 extends beyond EOD, truncated [ 207.230340][T26611] loop3: detected capacity change from 0 to 4096 [ 207.254409][T26576] loop5: p2 p4 [ 207.258047][T26576] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.269415][T26576] loop5: p4 size 2097152 extends beyond EOD, truncated [ 207.284898][ T1028] loop3: p2 p4 [ 207.288530][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.295710][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.303785][T26611] loop3: p2 p4 [ 207.308385][T26611] loop3: p2 size 327680 extends beyond EOD, truncated 01:34:45 executing program 3: syz_read_part_table(0x900000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:45 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/6) 01:34:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@flushpolicy={0x10, 0x12}, 0x10}, 0x8}, 0x0) 01:34:45 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:45 executing program 5: syz_read_part_table(0xd4d08db3, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 207.315914][T26611] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.322903][T26579] loop1: detected capacity change from 0 to 264192 01:34:45 executing program 1: syz_read_part_table(0xffffe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 207.374144][T26579] loop1: p2 p4 [ 207.377822][T26579] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.385520][T26579] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:45 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/6) 01:34:45 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') 01:34:45 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:45 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/netfilter\x00') [ 207.420483][T26663] loop5: detected capacity change from 0 to 264192 [ 207.428130][ T1028] loop1: p2 p4 [ 207.432852][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.435676][T26662] loop3: detected capacity change from 0 to 18432 [ 207.451333][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001ec0)={'syztnl0\x00', 0x0}) 01:34:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) [ 207.474140][T26662] loop3: p2 p4 [ 207.477686][T26663] loop5: p2 p4 [ 207.481271][T26662] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.488277][T26663] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.504261][T26662] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.511915][T26663] loop5: p4 size 2097152 extends beyond EOD, truncated [ 207.557975][T26691] loop1: detected capacity change from 0 to 264192 [ 207.571089][T26662] loop3: detected capacity change from 0 to 18432 [ 207.593657][T26663] loop5: detected capacity change from 0 to 264192 [ 207.604268][T26662] loop3: p2 p4 01:34:45 executing program 3: syz_read_part_table(0x1000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:45 executing program 4: socket$inet(0x10, 0x80003, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:34:45 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') 01:34:45 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) [ 207.604278][T26691] loop1: p2 p4 [ 207.607821][T26662] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.611317][T26691] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.619840][T26662] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.625539][T26691] loop1: p4 size 2097152 extends beyond EOD, truncated [ 207.632450][ T1028] loop5: p2 p4 [ 207.643118][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.650354][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:45 executing program 5: syz_read_part_table(0xe4ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 207.658380][T26663] loop5: p2 p4 [ 207.661990][T26663] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.669613][T26663] loop5: p4 size 2097152 extends beyond EOD, truncated [ 207.690669][T26691] loop1: detected capacity change from 0 to 264192 01:34:45 executing program 1: syz_read_part_table(0xffffefff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:45 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 01:34:45 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x0, 0x0) select(0x40, &(0x7f00000000c0), &(0x7f00000001c0)={0x3}, 0x0, 0x0) 01:34:45 executing program 4: socket$inet(0x10, 0x80003, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 207.734283][T26691] loop1: p2 p4 [ 207.742099][T26691] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.754796][T26691] loop1: p4 size 2097152 extends beyond EOD, truncated [ 207.762891][T26754] loop3: detected capacity change from 0 to 32768 [ 207.771003][T26763] loop5: detected capacity change from 0 to 264192 01:34:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) 01:34:45 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) [ 207.813979][T26754] loop3: p2 p4 [ 207.817548][T26754] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.828699][T26763] loop5: p2 p4 [ 207.832681][T26754] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.837910][T26763] loop5: p2 size 327680 extends beyond EOD, truncated [ 207.840029][ T1028] loop1: p2 p4 01:34:45 executing program 4: socket$inet(0x10, 0x80003, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000580007041dfffd946f610500020000e8fe0208010001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 207.861135][ T1028] loop1: p2 size 327680 extends beyond EOD, truncated [ 207.872314][ T1028] loop1: p4 size 2097152 extends beyond EOD, truncated [ 207.873070][T26763] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:45 executing program 3: syz_read_part_table(0x2000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:45 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x200040, 0x0) fcntl$getownex(r0, 0x10, 0x0) 01:34:45 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, 0x0, 0x0) 01:34:45 executing program 2: mq_open(&(0x7f0000000140)='^$!.\x00', 0x40, 0x0, &(0x7f0000000180)={0x800, 0x0, 0xffffffff00000001, 0x1}) [ 207.918872][T26754] loop3: detected capacity change from 0 to 32768 [ 207.954035][T26763] loop5: detected capacity change from 0 to 264192 [ 207.954068][T26754] loop3: p2 p4 [ 207.964308][T26754] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.971732][T26754] loop3: p4 size 2097152 extends beyond EOD, truncated [ 207.977778][T26813] loop1: detected capacity change from 0 to 264192 [ 207.986193][ T1028] loop3: p2 p4 [ 207.989716][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 207.996814][T26763] loop5: p2 p4 [ 208.000404][T26763] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.009500][T26763] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:45 executing program 5: syz_read_part_table(0xeeffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 208.020197][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated [ 208.030321][T26813] loop1: p2 p4 [ 208.033986][T26813] loop1: p2 size 327680 extends beyond EOD, truncated [ 208.044010][T26813] loop1: p4 size 2097152 extends beyond EOD, truncated [ 208.073608][ T1028] loop5: p2 p4 [ 208.077384][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.084487][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 208.096593][T26813] loop1: detected capacity change from 0 to 264192 [ 208.113427][T26852] loop3: detected capacity change from 0 to 65536 01:34:45 executing program 1: syz_read_part_table(0xfffffdfd, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:45 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, 0x0, 0x0) 01:34:45 executing program 0: add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000140)={0x0, "f02bb2d10a8881e7cf13829dde7c50c7962fda1a520e336f7f817d739a7a91738fd4eac7ad5904f4d6d2cbe01981718d4659a4523f1d130f97fa752e5bf31379"}, 0x48, 0xfffffffffffffffc) 01:34:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') [ 208.120985][T26846] loop5: detected capacity change from 0 to 264192 [ 208.144047][T26813] loop1: p2 p4 [ 208.147669][T26813] loop1: p2 size 327680 extends beyond EOD, truncated [ 208.155470][T26813] loop1: p4 size 2097152 extends beyond EOD, truncated [ 208.163614][T26852] loop3: p2 p4 [ 208.169172][T26846] loop5: p2 p4 01:34:46 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c}, &(0x7f0000000080)) 01:34:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) [ 208.180448][T26846] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.189877][T26852] loop3: p2 size 327680 extends beyond EOD, truncated [ 208.206840][T26852] loop3: p4 size 2097152 extends beyond EOD, truncated [ 208.222256][T26846] loop5: p4 size 2097152 extends beyond EOD, truncated 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, 0x0, 0x0) [ 208.240365][T26877] loop1: detected capacity change from 0 to 264192 [ 208.262787][T26852] loop3: detected capacity change from 0 to 65536 [ 208.279100][T26846] loop5: detected capacity change from 0 to 264192 [ 208.285955][T26877] loop1: p2 p4 [ 208.289563][T26877] loop1: p2 size 327680 extends beyond EOD, truncated [ 208.304973][T26877] loop1: p4 size 2097152 extends beyond EOD, truncated 01:34:46 executing program 3: syz_read_part_table(0x2040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:46 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x104}], 0x2, &(0x7f0000000140), &(0x7f0000000180)={[0x400]}, 0x8) 01:34:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40011) 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 208.334057][T26852] loop3: p2 p4 [ 208.337648][ T1028] loop5: p2 p4 [ 208.337702][T26852] loop3: p2 size 327680 extends beyond EOD, truncated [ 208.341223][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.350427][T26852] loop3: p4 size 2097152 extends beyond EOD, truncated [ 208.356644][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 208.371251][T26846] loop5: p2 p4 [ 208.371433][T26877] loop1: detected capacity change from 0 to 264192 01:34:46 executing program 5: syz_read_part_table(0xf5040000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 208.375551][T26846] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.388424][T26846] loop5: p4 size 2097152 extends beyond EOD, truncated [ 208.404011][T26877] loop1: p2 p4 [ 208.407518][T26877] loop1: p2 size 327680 extends beyond EOD, truncated [ 208.419210][T26877] loop1: p4 size 2097152 extends beyond EOD, truncated [ 208.427254][ T1028] loop5: p2 p4 01:34:46 executing program 1: syz_read_part_table(0xffffff7f, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 01:34:46 executing program 2: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='keyring\x00', 0xfffffffffffffffd) 01:34:46 executing program 0: ppoll(&(0x7f0000000180)=[{}, {}], 0x2, &(0x7f0000000440), &(0x7f0000000200), 0x1) 01:34:46 executing program 0: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0) [ 208.430761][ T1028] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.446644][ T1028] loop5: p4 size 2097152 extends beyond EOD, truncated [ 208.471663][T26949] loop3: detected capacity change from 0 to 66048 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 01:34:46 executing program 2: ppoll(&(0x7f0000000340)=[{}, {}], 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x8) [ 208.513792][T26949] loop3: p2 p4 [ 208.517412][T26949] loop3: p2 size 327680 extends beyond EOD, truncated [ 208.527532][T26949] loop3: p4 size 2097152 extends beyond EOD, truncated [ 208.593311][T26977] loop5: detected capacity change from 0 to 264192 [ 208.600625][T26976] loop1: detected capacity change from 0 to 264192 01:34:46 executing program 3: syz_read_part_table(0x3000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:46 executing program 0: socket(0x1, 0x0, 0x4) 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 01:34:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r0) [ 208.666589][T26977] loop5: p2 p4 [ 208.670130][T26977] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.677575][T26976] loop1: p2 p4 [ 208.681132][T26976] loop1: p2 size 327680 extends beyond EOD, truncated [ 208.693497][T26977] loop5: p4 size 2097152 extends beyond EOD, truncated [ 208.701142][T26976] loop1: p4 size 2097152 extends beyond EOD, truncated [ 208.771442][T27016] loop3: detected capacity change from 0 to 98304 [ 208.800346][T26977] loop5: detected capacity change from 0 to 264192 [ 208.823821][T27016] loop3: p2 p4 [ 208.827368][T27016] loop3: p2 size 327680 extends beyond EOD, truncated [ 208.834473][T27016] loop3: p4 size 2097152 extends beyond EOD, truncated [ 208.842971][ T1028] loop3: p2 p4 [ 208.843875][T26977] loop5: p2 p4 [ 208.847302][ T1028] loop3: p2 size 327680 extends beyond EOD, truncated [ 208.850008][T26977] loop5: p2 size 327680 extends beyond EOD, truncated [ 208.858487][ T1028] loop3: p4 size 2097152 extends beyond EOD, truncated 01:34:46 executing program 5: syz_read_part_table(0xf6ffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:46 executing program 1: syz_read_part_table(0xffffff80, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="030005020314af0003140000000000ffffffa60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x52, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:34:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') fcntl$getownex(r0, 0x10, 0x0) 01:34:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 01:34:46 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000380)="0046d1da0cdf161a51ae27920a5a34084702630312f209d3016002a9218394b0ea9b43b583b1c2f2d6ab289139085e370fef075e0904b93f5d012faf9bc77634512d8d17c9b181694335f348c46dd8e1d17088a1de4890afe2efcdad3e79c8c100f0a15f359766f0978e03ab2fe152999d7157872e180dc9b12ed708c19e8dd0461a5058947d", 0x86, 0xfffffffffffffffc) [ 208.864852]