0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x5, 0x4e22, 0x8, 0xa, 0x80, 0x20, 0x33, r5, 0xffffffffffffffff}, {0x7, 0xf2c, 0xfffffffffffffffe, 0xf3, 0x3, 0x1, 0x7fff, 0x1}, {0x1ff, 0x80000000, 0x80000000000, 0x90}, 0x80, 0x6e6bbc, 0x2, 0x0, 0x6, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x3, 0x9b, 0xc3c, 0xfff, 0x2}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="78cf33b40141a06e71fa4f59d04955b3baa41cb41b18abc186eb3b209092a969e46b1af8acf83f8f25db44fc6b47e746ce9549dab431a564468b08344964831ebb78c10941f900d1d0f4a051ffd954a521e2ce18dcdfbcc7f53b817cf9969c29780a457bb60ecf918a39ebe7fdac6fc4ec3c8af3325f606033326213b570eea4f948b6a3b27e91f8e27051b6f69520ee57dd5fa5f37f6aa4a633397d26b38b060c783af1e5a90afb67a9495abde174ba3a08f5", 0xb3}, {&(0x7f0000000b00)="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", 0x15e}, {&(0x7f0000000200)="a6551e51f892777ea1efdd3c669a3411860f74219bc375fb46bc8369cf0df616868a32bc66395a2034a6ac503b4225d76ccc1a8b42748128f1326898b9502d0fad8ab2bc0c9460d8b41637832c8da41dd38167f9e725581b39558bc3e76765117f8c9ea9fa97eb4b7684f01e65fe5e4767f670afbfc62ab50e57a10472812d7a7b4c022390cfb6c40d0149a0f80007d19385740b33f3510603d1e75f0f89819187a65593bd23002f6892e6879149158d82149f14ebeb0022c6", 0xb9}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="b80000000000000029000000390000000114020100000000ff010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bbfc000000001700000000000000000000fe800000000000000000000000000020ff010000000000000000000000000001fc0100000000000000000000000000000000000000000000000000000000000100000000000000000000ffffe0000001fe880000000000000000000000000001"], 0xb8}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x1, @empty}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000400)="c114b45fd83b16749f0ea6156372c1d2c1adbfdcb23bf8918a4196b194c1078b097446bfe077deec5e242c0b9584318348f14dc7b093ab0eafc3b3467079d983268d47be623a2fcd37879db9cb3649fb2e85654a25467e44eec8be883817ce5a7b484a27ed661d9210e23f0e13abdc5d3fb059cf442ab5eb6519bc8c33ddc8e5850a559e5f907c5c40ef837bd3c8ccdfc26411916fc021fe60ef692da9af60404c2d026769b0688b9ccd853709bb2043366b54add70fefc9d7aa57b1ff0418f80907664e889320fcc1f12a6553848f55e9aa589eefc2a255904fd47bace4450ea904e4160609651b5b6cfd459c2ac11f", 0xf0}], 0x2, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x1000}}], 0x18}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000005c0)="59f36fcf3f362ae44ffc09361ab71e16ade0e7dac604d5202ae43900dccfa8674b91714050bb9971658467af826d5caeb088c532b1d395f4bbbfe5cc15a7e21d8fa2296c572760fd53f82e328186665d0f039ed93a09ee93840312fff3d23ce09abd50589acd8ee8c972d247cc45ba9ea7943edc06da9b80237c0fb6a18bac74bb9c81c5604e496e1da00f0c42d143747603b6c0a8d17a5c5c5654fd1383b6d4739e9e20c9e2ddc9dea2447d93", 0xad}], 0x1, &(0x7f00000006c0)=[@rthdrdstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x30, "6cb664c574c5e7f8b8126f1f6b5299552aa07f5fd4b9bdbf910d869c081b918ebabc7fed66b6e5853ff6758851a972bb"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x6a, 0x3, [0x3, 0x4, 0x5, 0x8000, 0x7111, 0x7, 0x1, 0x5, 0x3b1897d7]}}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0xff, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x8, 0x41, "28a23af6d68e295c42f5cbb89e0b65cd7560c5b900f42f46420f4afc30637ca09f28450a9e096719fbc1129b3cb7bef9997e4ea4558fbd93814f3b3f4c8bc98de1"}, @pad1]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2b, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x168}}], 0x3, 0x44) 10:50:03 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000f000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1563.729053][T28939] loop3: p2 < > p3 p4 < p5 > [ 1563.733880][T28939] loop3: p2 size 2 extends beyond EOD, truncated [ 1563.745650][T28985] serio: Serial port pts0 [ 1563.754244][T28939] loop3: p3 start 225 is beyond EOD, truncated [ 1563.760608][T28939] loop3: p4 size 2 extends beyond EOD, truncated [ 1563.772395][ T1038] loop2: p2 < > p3 p4 < p5 > 10:50:03 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a007400ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1563.774471][T28939] loop3: p5 start 225 is beyond EOD, truncated [ 1563.781138][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1563.803016][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1563.809434][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1563.821034][T29011] loop4: detected capacity change from 0 to 1 10:50:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) syz_io_uring_setup(0x1ede, &(0x7f0000000680)={0x0, 0xb833, 0x2, 0x2, 0x228, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xc40c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa, 0x80010, r5, 0x10000000) preadv(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/38, 0x26}], 0x9, 0xfffffff7, 0x10000) io_uring_enter(r3, 0x6103, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x20c0, 0x90) 10:50:04 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast2, 0x6}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000740)=""/197, 0xc5}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000600)=""/38, 0x26}], 0x7, &(0x7f0000000440)=""/34, 0x22}, 0x9}], 0x1, 0x40002002, 0x0) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000000940)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc88b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9e8944c2effaddd9474e0839de1851e7df5f3d5b259da9ec51a6d9fc1ad5785bdf1d741ad46361a92cb962aeef0a87fccb855ca8bc50012be0c8245227a3140aacbaee04596580ea563478dc39e395859ec7a2c197000", 0xd7, 0x40090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @local, 0xfffffffe}, 0x7c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) socketpair(0x4, 0x4, 0xed7, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$inet(r4, &(0x7f0000000180)="48c8cdd6612459d5473c9466c64f91ce0b0f734c61c5d0e4f8953bc4e2d581", 0x1f, 0x8040, &(0x7f00000001c0)={0x2, 0x3, @empty}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10007}, 0xffffffffffffffa4) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1563.821656][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1563.859675][T29020] loop3: detected capacity change from 0 to 1 [ 1563.869234][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1563.874192][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1563.883649][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1563.889913][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r3 = syz_io_uring_setup(0x7, &(0x7f0000000080)={0x0, 0x6b80, 0x0, 0x2}, &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1400}, 0x1, {0x0, r6}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1563.904532][T29011] loop4: detected capacity change from 0 to 1 [ 1563.911258][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1563.918068][T29020] loop3: p2 < > p3 p4 < p5 > [ 1563.923015][T29020] loop3: p2 size 2 extends beyond EOD, truncated [ 1563.931816][T29020] loop3: p3 start 225 is beyond EOD, truncated [ 1563.938069][T29020] loop3: p4 size 2 extends beyond EOD, truncated 10:50:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x700) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:04 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000011000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x5) r9 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r12 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r15 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x110, &(0x7f0000000300)=0x8, 0x0, 0x4) r18 = io_uring_register$IORING_REGISTER_PERSONALITY(r15, 0x9, 0x0, 0x0) syz_io_uring_submit(r16, r17, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r18}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001480)={0x20002008}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r18}}, 0xb6) syz_io_uring_submit(r10, r14, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/180, 0xb4}, 0x0, 0x40000100, 0x0, {0x2, r18}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1563.957625][T29020] loop3: p5 start 225 is beyond EOD, truncated [ 1563.979523][T29049] serio: Serial port pts0 10:50:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1564.029598][T29020] loop3: detected capacity change from 0 to 1 [ 1564.058241][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1564.059122][T29072] loop4: detected capacity change from 0 to 1 [ 1564.064340][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1564.076470][T29020] loop3: p2 < > p3 p4 < p5 > [ 1564.082177][T29020] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.083469][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1564.094823][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1564.102056][T29020] loop3: p3 start 225 is beyond EOD, truncated [ 1564.102874][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1564.108356][T29020] loop3: p4 size 2 extends beyond EOD, truncated 10:50:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) r7 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x20, 0x10040, 0x12345, {0x0, r10}}, 0x4) r11 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r4, r13, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0}, 0x400000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1564.124977][T29020] loop3: p5 start 225 is beyond EOD, truncated 10:50:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xe00) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:04 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a007a00ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1564.168802][T29072] loop4: detected capacity change from 0 to 1 [ 1564.176034][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1564.186557][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.201584][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1564.204962][T29098] serio: Serial port pts0 [ 1564.207912][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:50:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1564.209289][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1564.305135][T29111] loop3: detected capacity change from 0 to 1 [ 1564.348708][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1564.353586][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.360616][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1564.367351][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1564.374966][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1564.382996][T29111] loop3: p2 < > p3 p4 < p5 > [ 1564.388379][T29111] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.404008][T29111] loop3: p3 start 225 is beyond EOD, truncated [ 1564.410361][T29111] loop3: p4 size 2 extends beyond EOD, truncated [ 1564.417422][T29111] loop3: p5 start 225 is beyond EOD, truncated [ 1564.460348][T29111] loop3: detected capacity change from 0 to 1 [ 1564.497584][T29111] loop3: p2 < > p3 p4 < p5 > [ 1564.502408][T29111] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.509902][T29111] loop3: p3 start 225 is beyond EOD, truncated [ 1564.516257][T29111] loop3: p4 size 2 extends beyond EOD, truncated [ 1564.524162][T29111] loop3: p5 start 225 is beyond EOD, truncated [ 1564.532722][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1564.538381][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.547372][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1564.553832][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1564.561572][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:04 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0xfffffffd) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:04 executing program 0: r0 = syz_io_uring_setup(0x298d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pkey_mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000009, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6007, @fd_index=0x1, 0xceb, 0x13d, 0x1, 0x12, 0x1, {0x2, r7}}, 0x80000000) r8 = syz_io_uring_setup(0x1e9c, &(0x7f0000000180)={0x0, 0xa8cc, 0x20, 0x0, 0x29e}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x5f7c, &(0x7f00000002c0)={0x0, 0xa6f9, 0x10, 0x3, 0x303, 0x0, r8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r10 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) syz_io_uring_submit(r9, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r14, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, 0x100000, 0x0, {0x0, r13}}, 0xdfffffff) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:04 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000012000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x2000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:04 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a009000ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1564.781834][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1564.786690][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1564.801076][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1564.807430][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1564.810793][T29161] serio: Serial port pts0 [ 1564.818818][T29160] loop3: detected capacity change from 0 to 1 10:50:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x800, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="fc00000048000722ab092504090007000aab2000130000000008e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fa0780196370d115103d633d450002000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ad20d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e98839fe326f082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567a8835d731d05b097331ffa09b62de842276d0098f07da2", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558d28ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd9acc683b029e59b9", 0x82, 0xc094, &(0x7f0000001180)={0x2, 0x4e22, @local}, 0xfffffffffffffcb6) write(r2, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007200)=[{{0x0, 0x0, 0x0, 0x4e}, 0x2}, {{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)=""/60, 0x26}, {&(0x7f0000000080)=""/71}, {&(0x7f0000000100)=""/18}, {&(0x7f0000000140)=""/95}, {&(0x7f00000001c0)}, {&(0x7f0000000380)=""/164}]}, 0x7}], 0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}, 0xfffffff9}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x90, 0x4) 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:05 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1564.826302][T29162] loop4: detected capacity change from 0 to 1 [ 1564.839163][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1564.882933][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1564.888622][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1564.890362][T29160] loop3: p2 < > p3 p4 < p5 > [ 1564.898139][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1564.904260][T29160] loop3: p2 size 2 extends beyond EOD, truncated [ 1564.907752][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1564.921573][T29162] loop4: detected capacity change from 0 to 1 10:50:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fsync(r3) [ 1564.929248][T29160] loop3: p3 start 225 is beyond EOD, truncated [ 1564.935677][T29160] loop3: p4 size 2 extends beyond EOD, truncated [ 1564.948533][T29160] loop3: p5 start 225 is beyond EOD, truncated [ 1564.956251][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x200000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24ca82, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x3}) io_uring_enter(r0, 0x40002fd, 0x0, 0x3, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x10000000) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x80000001) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x20, 0x8, 0x1, {0x0, 0x0, r7}}, 0x1) [ 1564.983709][T29160] loop3: detected capacity change from 0 to 1 10:50:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0x840, &(0x7f0000001180)={0x2, 0x4e22, @loopback}, 0x10) write(r3, &(0x7f0000000280)="fc00000048000722ab092504090007000aab2000130000000008e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fa0780196370d115103d633d450002000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ad20d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e98839fe326f082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567a8835d731d05b097331ffa09b62de842276d0098f07da2", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000002c0)=""/234, &(0x7f0000000200)=0xea) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r2, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xffffffffffffff91) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/200, 0xc8}], 0x1, &(0x7f0000000180)=""/32, 0x20}, 0x40000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @private2, 0x80000001}, 0x1c) 10:50:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000020000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1565.024506][T29208] serio: Serial port pts0 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x813, r0, 0x8000000) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r4, 0x720, 0x0, 0xbc8f, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x3) [ 1565.047667][T29160] loop3: p2 < > p3 p4 < p5 > [ 1565.052660][T29160] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.066609][T29160] loop3: p3 start 225 is beyond EOD, truncated [ 1565.073392][T29160] loop3: p4 size 2 extends beyond EOD, truncated [ 1565.086867][T29160] loop3: p5 start 225 is beyond EOD, truncated 10:50:05 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00c000ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1565.095672][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1565.101787][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1565.108992][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1565.116021][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000f, 0x100010, r0, 0x10000000) r7 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000001700)=@IORING_OP_ASYNC_CANCEL={0xe, 0x7, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x1c3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x60080, 0x100) sendmsg(r11, &(0x7f00000016c0)={0xfffffffffffffffd, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)="1bc7919cbeec774bf6ee18c4041768038dbe3c71825e0f666d25b885152f63104811462debe7a6b8b13deccb76caf75852e059ff40b3dd677ddf3e74e33e7f873939cd67b6fc45b1a5607c9d9b8e72ff9befbe6275ba96e41d749775f196452471b9fd3c8294057e253eba4f654ada1b47fa73f279a69f3a4727b0a67034c25418a5cb386acf856a1a65a6d64f10ee4a5873189fa6b32c8521d92bdeb71264748b7661992f1b6584508b91a489f0308a7343a2f75ad5af43315afedb4ce6cb09c0bd19f71c74797fe77a", 0xca}, {&(0x7f0000000180)="07ce1f3034af55190d59a41adfe2d11ffc87bad89ea21e9e0bff37acb2d01847dd0fa68b9c10e1f177e5d5b4b558559fb3687081cb3245259fb1051c7f45cebc15ca536e57d0e261c38122fc54ad3ea684eeac7a02ade4e23d8bfeea3b1bd2f1598132725731f2c4cc5d2a90ac1691ea97808c87a99a93a50f9bf62cad8bb4963783", 0x82}, {&(0x7f00000003c0)="e33f21347a786752d82b61bc5da506035868fc7d136e30812e228b6d9f2bbf54165f8e15fefabb05069aa1edd2c9902d00eeb813394d8e616a9e3f65697d4192f934bc40bf483971ef7944da82348ed3836eba5a50c0487daf78db6d42d0a3942f09dc9ed1cb77701c204df23c6dcf8029f38c21a083aeda24f675997c78b718011570b86e05dc796a36e5bc5f1e2ec33fb96b895396261f58d109a3ab5b9074a314", 0xa2}, {&(0x7f0000000480)="b239d2ec52037dff982bf7b9b4b154107490bde0ca42c3cc456c0edc89808424ff81e883daf515f2990d515912db46b57635f6ac778f9e65cd0f39931ec45b48cf49fd8897d6c425d22b44dbc9b168059e2854905dce3fc3b746b2fb1a226673a717feaec5a291029f77493ea22b987f71668017dd43cac0ea634275dbc70ce38094e9064351ee7de73d0581014634cdaf38a7d07d64984625aaea2c40a2967bb72dcdd64eddbfeda3b70ef9b03102f265a8b50e8a08b6d91d234d36f828513e6e34dff3a00e2092b489a1d0b19ee11cf60931c0826a280d84674373a39a2c5ce7ab5e", 0xe3}, {&(0x7f00000000c0)="38ee941d83506ce4f523886b8250b946d307b7924762e56c980f756f51fe10e46e1837d2f10dd330e37a33", 0x2b}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="21daca2962ed6d5b76248f057c477eecf4606e3e479e1b0e0b56f07730680654568b3cd38bf3ead56b2012c27cf29220c6887b532aee40ed3bf1b50372981f3f186f2ba60beadcc408c7a99768d7ef270c8163887adfbfa0087c5b69bda2b4dba49db49a987aabf77e30ebd2352330c47b7022c4b7bd397cb53733971e202c34efa57581b6d77af94f633cf8472fb8bcf8259cc3", 0x94}], 0x7}, 0x4) [ 1565.168495][T29232] loop4: detected capacity change from 0 to 1 [ 1565.182104][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1565.196908][T29237] serio: Serial port pts0 [ 1565.229153][T29247] loop3: detected capacity change from 0 to 1 [ 1565.258600][T29232] loop4: detected capacity change from 0 to 1 10:50:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1565.277748][T29247] loop3: p2 < > p3 p4 < p5 > [ 1565.282716][T29247] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.303238][T29247] loop3: p3 start 225 is beyond EOD, truncated [ 1565.309711][T29247] loop3: p4 size 2 extends beyond EOD, truncated 10:50:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000022000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1565.325107][T29247] loop3: p5 start 225 is beyond EOD, truncated [ 1565.340390][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1565.345589][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.363194][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1565.369711][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:50:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xca, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1565.398281][T29272] loop4: detected capacity change from 0 to 1 [ 1565.405052][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1565.455438][T29247] loop3: detected capacity change from 0 to 1 [ 1565.477492][T29284] serio: Serial port pts0 [ 1565.493257][T29272] loop4: detected capacity change from 0 to 1 [ 1565.500285][T29247] loop3: p2 < > p3 p4 < p5 > 10:50:05 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1565.505289][T29247] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.527412][T29247] loop3: p3 start 225 is beyond EOD, truncated [ 1565.533707][T29247] loop3: p4 size 2 extends beyond EOD, truncated [ 1565.557416][T29247] loop3: p5 start 225 is beyond EOD, truncated [ 1565.565281][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1565.570695][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.597259][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1565.603615][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1565.615965][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1565.668593][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1565.673557][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.681394][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1565.687824][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1565.694795][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000025000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xcb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:06 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x5000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:06 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00e100ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "aa542b0d784a28ff", "626ec091646d5c11fdb7cb116b280eb2", "0ed304cd", "740cc36cb3d0ae92"}, 0x28) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/58, 0x3a, 0x100, &(0x7f0000000040)={0xa, 0x4e20, 0x4034, @private1={0xfc, 0x1, '\x00', 0x1}, 0x99}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) fcntl$setflags(r1, 0x2, 0x1) [ 1565.955055][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1565.962144][T29330] loop3: detected capacity change from 0 to 1 [ 1565.970211][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1565.975762][T29332] serio: Serial port pts0 [ 1565.981340][T29337] loop4: detected capacity change from 0 to 1 [ 1565.987940][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1565.994142][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:06 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x187}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r3, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x355cebe32ae3c2ac, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) [ 1566.002536][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1566.017758][T29330] loop3: p2 < > p3 p4 < p5 > [ 1566.022578][T29330] loop3: p2 size 2 extends beyond EOD, truncated [ 1566.038425][T29330] loop3: p3 start 225 is beyond EOD, truncated [ 1566.044736][T29330] loop3: p4 size 2 extends beyond EOD, truncated 10:50:06 executing program 2: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfff, @private2, 0x8f}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x4, 0x0, 0x3, 0xa, 0x1f, 0xfffd}, 0x20) 10:50:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xcc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1566.058429][T29330] loop3: p5 start 225 is beyond EOD, truncated [ 1566.072086][T29337] loop4: detected capacity change from 0 to 1 10:50:06 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a002001ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x8001, 0x2, 0xff, 0x7, 0x8, 0x9}, 0x20) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x7000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000003f000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xcd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1566.168391][T29376] loop3: detected capacity change from 0 to 1 [ 1566.185318][T29384] serio: Serial port pts0 [ 1566.188706][T29386] loop4: detected capacity change from 0 to 1 [ 1566.207635][T29376] loop3: p2 < > p3 p4 < p5 > [ 1566.212531][T29376] loop3: p2 size 2 extends beyond EOD, truncated [ 1566.225746][T29376] loop3: p3 start 225 is beyond EOD, truncated [ 1566.232276][T29376] loop3: p4 size 2 extends beyond EOD, truncated [ 1566.244417][T29376] loop3: p5 start 225 is beyond EOD, truncated [ 1566.256454][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1566.262199][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:50:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xce, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1566.270441][T29386] loop4: detected capacity change from 0 to 1 [ 1566.277926][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1566.284307][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1566.291713][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000040000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1566.343682][T29376] loop3: detected capacity change from 0 to 1 [ 1566.384893][T29417] loop4: detected capacity change from 0 to 1 [ 1566.391916][T29376] loop3: p2 < > p3 p4 < p5 > [ 1566.392508][T29420] serio: Serial port pts0 [ 1566.396847][T29376] loop3: p2 size 2 extends beyond EOD, truncated [ 1566.410137][T29376] loop3: p3 start 225 is beyond EOD, truncated [ 1566.416366][T29376] loop3: p4 size 2 extends beyond EOD, truncated [ 1566.423403][T29376] loop3: p5 start 225 is beyond EOD, truncated 10:50:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xcf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1566.431630][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1566.436484][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1566.443510][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1566.449873][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1566.465239][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1566.502174][T29417] loop4: detected capacity change from 0 to 1 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xff, 0x5}, 0x7f) 10:50:07 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a005c01ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xe000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:07 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:07 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000048000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @pad1]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0x80000000}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000080)="8800e60ef4e0708dfefb1f15ebd2bd23371fd68a95ce04d6edee0be6033cafd6378bad1087a9e7a7b75416d448f01d4d41f9a3d238955c55a233a7d264af3e704e716bd45fe00f168daa3c4652459429c5ae5a26a0d61869db0092cc4bf4fabd74daa96f1763efb0efebf853f49676f9b6397df358b52a677eaf49544d2511633eb84df82874ee6e0446368e63de440437e9b5ed95ae08e550e74af5676a26488d9531d063ddc0904653a5b53a4b269146e299ff866a8b821795f3ff7e140bb9af870a5430", 0xc5}, {&(0x7f0000000180)="2bc0498d05af02465e46e656c302bf3e5841ff4408c540b69233652de8b0d55adc438b09e4bd69174d66a666eca666477004536becc9b8cad06ffaee68d6fe031662a864ed8ebd4222b35a82da6119457dacd03ddf30c156e3840a9a84e21fd143ed219f4b20cbf929", 0x69}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="27f350f224c32c0dd9a423cb8c5a27e2017c30cd93b5956055cc8f97584f5e4d0847cd27979f708bea29b061cef33e13602531237b8bb9b1f611f07a1bd2d0271a60ae157a8fe27a5a93721e6b044313cd7b109a8582a639e9ce93b91e8464bbf2f455df88429c39e92d673cdffc9ca9c2c4", 0x72}, {&(0x7f0000000380)="07278e4ec2f02d6a478ca557cd43aeed60629b4247c22aaeaba064296e8a345b8e66c05bfba32236b1ec6453d76b7a9ad3844c62ab5588cab529676c4db338cf501798e4ce5a221e3469f62c6cba6fa805a84643996be63f7362b4dc926117242d0b56688a4e2050021520a45d2121d917e8737921fafa323227d6503cbc368e0dff49e8dba1b1e024e534f3dec87444722ad35bdd9596bbd1fa584781d0937d2da8ea77f0f28971f347ce4949ed3521fea25e18209cfe9247b7354b0c5e2fd0fb8dfe482c4c63bc50cd9f2da6a3ddf3b96ae9734df57485b656b246eba39b3619da024553bdad606968c34b0b108c37db", 0xf1}, {&(0x7f0000000480)="22b46ba9cf", 0x5}], 0x6}, 0x48000) [ 1567.107509][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.112479][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.116109][T29464] loop4: detected capacity change from 0 to 1 [ 1567.121587][T29457] loop3: detected capacity change from 0 to 1 [ 1567.132657][T29459] serio: Serial port pts0 [ 1567.138471][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.144773][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2fc, 0x1, 0x0, 0x0, 0x0) 10:50:07 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x20) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x10000000, @remote, 0x7}, {0xa, 0x4e23, 0xed9b, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}, 0x6, [0x401, 0x5, 0x4, 0x2c51, 0x200, 0xfffff8d9, 0x2, 0x5]}, 0x5c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1567.153080][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:07 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1567.187836][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.192691][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.204692][T29457] loop3: p2 < > p3 p4 < p5 > [ 1567.210191][T29457] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.217575][T29464] loop4: detected capacity change from 0 to 1 [ 1567.220236][T29457] loop3: p3 start 225 is beyond EOD, truncated [ 1567.229897][T29457] loop3: p4 size 2 extends beyond EOD, truncated 10:50:07 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000004c000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) [ 1567.237489][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.243683][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1567.254015][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1567.263793][T29457] loop3: p5 start 225 is beyond EOD, truncated 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x1, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="657273330300"/16, @ANYRES32=0x0, @ANYBLOB="004080000000086600000001470d009c006400007f299078000000007f000001865d00000003020ade7c9a7375ad50f50707c2c3da1de60708248f3ec8dac30706abd604180502010c4e6726725f081e99cdd5061294e018daac4b26a09c5560024656c227061286bde4ce35e1c7b41dcfa1483dae6fd5020680890327940400004424984000000005ffffff92000000090000800100000000000000060000000800000000000000"]}) 10:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xebffffff) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1567.300543][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.306597][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.325695][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.331984][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1567.338846][T29509] loop4: detected capacity change from 0 to 1 [ 1567.356741][T29457] loop3: detected capacity change from 0 to 1 [ 1567.367741][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1567.367848][T29517] serio: Serial port pts0 [ 1567.388099][T29457] loop3: p2 < > p3 p4 < p5 > [ 1567.393020][T29457] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.400939][T29457] loop3: p3 start 225 is beyond EOD, truncated [ 1567.407149][T29457] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.414769][T29457] loop3: p5 start 225 is beyond EOD, truncated [ 1567.439201][T29509] loop4: detected capacity change from 0 to 1 10:50:07 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000402ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:07 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r7, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x80000002}) sendmsg(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="19e9c10fdc7c7b5c0d7333baebfce4439ddbb6411fe585f69ff60ab43d7ce44071e98324fc68061a98d79ba9afb2a07bd448aa1dc40b9586351140c4c6b6a34a3a93f980c21eae9d8d895edb6dca1484529d1030649336", 0x57}, {&(0x7f00000002c0)="7a14e1cf9611a00208194c39", 0xc}, {&(0x7f0000000300)="2e491409da5cd466e8a37423505f13b3bfae559eb496068b5e611212741dd35f7bbb5f9d1a1d70612e3ffe5fbcb39270f3e891", 0x33}, {&(0x7f00000003c0)="d682452a0f7d767d11ca84e697332094d81470cc4ba4d3e624ec5e6b0e4b31def9c34abd4541727ff25241d93a51db15c36fec39d70c209ae437a9729394be5de2ee6613d8f4ada075fceb84d1963356ce2a0b402f6070e21dc12d58a0c36b4f23007dc2d81b0326e9b3d9a1b61d63366250a4cc8053afa6d1ce18fb41554dc6cf7a885fe124d2a227090e4a7266b9028a9b6af9de6f918c585402c1be022a98d3a40a4025e566cdd75c4497e82d1900225cdd1364e2c59aa2c229426ac68acdaffba0011d16c563a60b6e53d102dc7735a129e312f7afc142857f555d5f969ea68f9401b87c8980118a3077b9724834f8e26aff6189467a", 0xf8}, {&(0x7f00000004c0)="ea93742a6f631ca1884f33522d0b5ace961c30f7ea3992b6cd6f47153a260661e6c97b790c697e56b56b8f410d53123352255d09fcf6923a", 0x38}, {&(0x7f0000000500)="5fbc856fca9d5a93052f9e4ec4b45582d394bbda0cca35e60eb7e1a678ccd54b057c922a1503b220ae33caff929cd53430f68b2d3fc4984c7280a89df1cf120c398315712230ec5a702717677814587cd007821b137b818a201a74f99d42b3", 0x5f}], 0x6, &(0x7f0000000600)=[{0x90, 0x109, 0x1ff, "2a60e9564411768ca5d4792fd3504e8314ca757eff83ca65ebf3ca701a0b1eedefe15e21a715f6e42d67abcd6b8ab2e221029cbb039d1523914ee61de81f244edf7afdca59192029050f001173ef39b1c6c3110fb622cbf43d6f16936e8bdceac27f38e307b1a813575e89aec1002cd2ece36a1ce617d5e378ebc608"}, {0x68, 0x117, 0x4, "4f76f0a4d84e735221cad9bcef54c112c189f0daf3108755f34c392a7c321c002a2a3a75b07591cc8ec31411356504aec39e3ee9dfe43a26d0874a4cc817471610ad36d2b586473bcbdd40a91a55e3ea994e10c9"}], 0xf8}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="8c9aed34587740297a8fa68bc40f4187727f13f53465cac579cbce8b4de1f431af1bcfe5eaad1d14de3d21cc23f1ea0c5816303144d7", 0x36, 0x2, 0x0, {0x0, r8}}, 0x7) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xfcffffff) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:07 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ftruncate(r0, 0xffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x8, 0x0, 0x3ff}}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1567.454252][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1567.459154][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.469102][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1567.475326][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.485320][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:07 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000068000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1000) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1567.520290][T29547] serio: Serial port pts0 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x3}, 0x8646, 0x2, 0xff, 0x0, 0x3ff, 0x2}, &(0x7f0000000100)=0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x11}, 0x4}, 0x1c) 10:50:07 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1567.554106][T29556] loop4: detected capacity change from 0 to 1 [ 1567.561858][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.567488][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.575624][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.581899][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1567.594764][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0xda2}, 0x1c) [ 1567.600301][T29571] loop3: detected capacity change from 0 to 1 10:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffeb) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1567.649139][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1567.660578][T29556] loop4: detected capacity change from 0 to 1 [ 1567.668601][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.677696][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1567.683945][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.687712][T29590] serio: Serial port pts0 [ 1567.695259][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1567.704012][T29571] loop3: p2 < > p3 p4 < p5 > [ 1567.709153][T29571] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.716964][T29571] loop3: p3 start 225 is beyond EOD, truncated [ 1567.723872][T29571] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.732026][T29571] loop3: p5 start 225 is beyond EOD, truncated [ 1567.761207][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.766148][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.773577][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.779990][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1567.787416][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1567.799872][T29571] loop3: detected capacity change from 0 to 1 [ 1567.815176][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1567.820903][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.828192][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1567.834493][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1567.842531][T29571] loop3: p2 < > p3 p4 < p5 > [ 1567.843244][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1567.847844][T29571] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.861679][T29571] loop3: p3 start 225 is beyond EOD, truncated [ 1567.868000][T29571] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.874881][T29571] loop3: p5 start 225 is beyond EOD, truncated 10:50:08 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a002702ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 10:50:08 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1567.908359][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1567.913156][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1567.928972][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1567.935183][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1567.943732][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1567.998358][T29632] loop3: detected capacity change from 0 to 1 [ 1568.005903][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.010860][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.018759][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.024976][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1568.032074][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.032712][T29632] loop3: p2 < > p3 p4 < p5 > [ 1568.044185][T29632] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.052579][T29632] loop3: p3 start 225 is beyond EOD, truncated [ 1568.053958][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.059237][T29632] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.066497][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.075767][T29632] loop3: p5 start 225 is beyond EOD, truncated [ 1568.085394][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.091709][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1568.098653][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.113872][T29632] loop3: detected capacity change from 0 to 1 [ 1568.121369][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.126207][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.133122][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.139533][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1568.146371][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.157742][T29632] loop3: p2 < > p3 p4 < p5 > [ 1568.162832][T29632] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.164348][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.171750][T29632] loop3: p3 start 225 is beyond EOD, truncated [ 1568.174258][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.180754][T29632] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.188948][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.194780][T29632] loop3: p5 start 225 is beyond EOD, truncated [ 1568.200032][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1568.213038][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.278734][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1568.283491][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.290620][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1568.296967][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.303973][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffc) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:08 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000006c000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="e5bf6b6a3e7cfac193fed3304be2c61a62e9931137e880c52c26dbf2a077d6838ac599c09ea38cf40e4f599defca4314a1e9a95cba480edc84e7415f297d6649c7e893e02e0709ec41f5babea1cf757b8be027472200931038b8cb250f9d827262872cb0ec1454de19b857d9f958474118d4aa48faece9e1cb17949859389419303885", 0x83, 0x8000, &(0x7f00000000c0)={0xa, 0x4e23, 0x3f, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:08 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:08 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000003ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{}, {}, {}], "404c29996ca6ed7f"}}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000050) r5 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r11 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x882, 0x20}, 0x18) syz_io_uring_submit(r9, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r11, 0x0, &(0x7f00000002c0)='./file0\x00', 0x90, 0x800, 0x23456}, 0x100) sendto(0xffffffffffffffff, &(0x7f0000000000)="7916b53e2c8ea60f3fe80309db0c763761a06088fdeff462598f22f2377c4add9a", 0x21, 0x20000000, &(0x7f0000000180)=@can, 0x80) [ 1568.449001][T29687] loop4: detected capacity change from 0 to 1 [ 1568.456174][T29688] serio: Serial port pts0 [ 1568.477803][T29692] loop3: detected capacity change from 0 to 1 10:50:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket(0x10, 0x802, 0x0) r2 = socket(0x10, 0x802, 0x0) sendto$inet(r2, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r2, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000206800000008000300234aaf77683eaa15f88fa94f61fca3d29597226acf81417e4b1f74e1bd9132407749ee0f56a16136b36647531856e4e48999a25e690ee28bca9644532b355507eeebd7674ce9d61b9a14b4752380715e3c", @ANYRES32=r5, @ANYBLOB="1200c700000000000000404c29996ca6ed7f0000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x60000088}, 0xc, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9c090000", @ANYRES16=r4, @ANYBLOB="0004280080000000001e0000000008000300ee8c9935f9091afc2fcc83a69e09bd502a6d20f36968d4965130c38788a611291bb18f09900be356e32cb178ba38baf67f92cc2e7144ee625a9ac95a561827b9bebd658a78d22d070267eaef4c33f10895cea20c71b1e09ff453a1921b9ad36fb676", @ANYRES32=0x0, @ANYBLOB="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"], 0x99c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4044004) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) splice(r0, &(0x7f0000000140)=0x400, r1, &(0x7f0000000180)=0x9, 0x7c00000000000002, 0xf) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x30001, 0x2a) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private1, @in=@private}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) 10:50:08 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000074000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1568.507151][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.513283][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.525980][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.532417][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1568.533464][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.549993][T29692] loop3: p2 < > p3 p4 < p5 > 10:50:08 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1568.554987][T29692] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.564158][T29703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29703 comm=syz-executor.2 [ 1568.591227][T29713] loop4: detected capacity change from 0 to 1 [ 1568.594762][T29692] loop3: p3 start 225 is beyond EOD, truncated 10:50:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x200000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1568.603558][T29692] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.626103][T29724] serio: Serial port pts0 [ 1568.627059][T29692] loop3: p5 start 225 is beyond EOD, truncated 10:50:08 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x80000) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r4, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="9d03173462a39ac2087797d22504c69e1c83820855d765ca29c05bfcb0430951c752449d05f7f0a04aec318872913b5ee029137658a62526d5b68a8b1a82f97ed92ef34dc1e87647c6e50ad3f40d3ef9e8e1f46e190d6f4724e5df511ad8f7457450269b61ebceecb817007e6e4c3470f21e6e35f1d4c47578ec132e5152a6da9290e642a9dd27ff888386c5c5e1a776f7c98cc8d32b44c7b534a98eafee65021db050ae4416e1581d58daef1cefd9e0", 0xb0}, {&(0x7f0000000380)="7e1843ca1d1e474872fa95b1f1d555121e69dfd00dc741975c3b74a9e5efcf271895cae6ae4dc14a4f80dfb4aa1d82d36feb3e478cb009e4c02e5f753fa8f9010978eee7964a115fc31cab823854c4a4cc3259f494458893c4deb73cdfaef42a85f4619e0c", 0x65}, {&(0x7f00000000c0)="1472868167b080", 0x7}, {&(0x7f0000000400)="57da5aec2f9830d207b50cf7b8f6b1f5a84bb4aca65f1783e2ba839dbf5f25a3154d16974fd3f4ef399a7a8185673d5c84110b69bb463fa9b79d8bf2131434ae0261210df2114916d752acfd9bba510f2b92c5bba20e4bdc0d51d9bd34756d80e77878bbf91467b33407e362175c72ee5d", 0x71}, {&(0x7f0000000480)="571e230b91d0769477abcbcd00186e96c2e5ec917d5f6b97b662faf9021e68f563ee26876565270579f8340aab4b3ff950185d6704aa44b0bd1ade08ff92ed765c3e0ea21558ff3b2b9b042e9d770aca1d7129e5f7922b92b28bd36cd6aa886451f584026c5b7e46e3239d732d063bc739e7901c4661baae9e2a4728c5fa4259edba20b3c2f4900581a33d9e1d31bf1b606ae34ef64220500c937698ad5a55b7d284cde0ddb37ba71bba406f4b0207fd986f6ca327d1db4760ec6ed58bd7fdd98d7e1ac0daea387d98bacae0f646", 0xce}, {&(0x7f0000000200)="8d", 0x1}], 0x6, 0x0, 0x0, 0x1}], 0x1, 0x800) fcntl$notify(r3, 0x402, 0x24) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:08 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) recvfrom$inet6(r0, &(0x7f00000000c0)=""/118, 0x76, 0x20, &(0x7f0000000140)={0xa, 0x4e22, 0x2006, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="88e7a13914f5ce47f3fa7a9bf0683f580549da0c922eeaa4cec3ba9252565f9fc0b622fcb5085b740470b2817bb472bf4d239d74afa8ba42fbf4e084ec2f733acdf4037983684bade589a067f1e40084427d742be76b9d", 0x57, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="3825c4a7893ac411", 0x8, 0x44000, &(0x7f0000000040)={0xa, 0x4e22, 0xf514, @local, 0x9}, 0x1c) [ 1568.646613][T29717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29717 comm=syz-executor.2 10:50:08 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:08 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x1, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x5cde, &(0x7f0000000340)={0x0, 0x2bb5, 0x4, 0x0, 0x31b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x56db, 0x92ec, 0x0, &(0x7f0000000000)={[0x7fffffff]}, 0x8) io_uring_enter(r4, 0x484a, 0x8cf3, 0x1, &(0x7f00000002c0)={[0x6]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) io_uring_enter(r7, 0x5ec0, 0x6a6e, 0x1, &(0x7f00000000c0)={[0x7f]}, 0x8) ioctl$int_out(r4, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe8c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) write(0xffffffffffffffff, &(0x7f00000003c0)="36d59d2732c2d1164070869e89487a6d131c2a776840c90b3349b85725abf108c8f830b87c3df951674fe686edaeba3b8544a8c6daa8ca6f75281625baaff3701bbddca83bdbcb2c56bcc58c4b6ed84a94baf80eb1a79972447655d7342b5f278453f4b6", 0x64) io_uring_enter(r4, 0x2ff, 0x4c05, 0x0, 0x0, 0xfffffffffffffdcd) [ 1568.683553][T29692] loop3: detected capacity change from 0 to 1 [ 1568.697906][T29713] loop4: detected capacity change from 0 to 1 10:50:08 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000007a000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:08 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/122) r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x281}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1568.742212][T29692] loop3: p2 < > p3 p4 < p5 > [ 1568.747673][T29692] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.768972][T29692] loop3: p3 start 225 is beyond EOD, truncated [ 1568.775294][T29692] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.785163][T29692] loop3: p5 start 225 is beyond EOD, truncated 10:50:09 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a009603ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) keyctl$chown(0x4, 0x0, r1, 0xee00) r2 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x2, 0x1, 0x0, 0x0, 0x1c, 0x0, {0x3}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0x0) keyctl$chown(0x4, 0x0, r1, r9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) [ 1568.802209][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1568.812243][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1568.831868][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1568.838132][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:09 executing program 0: r0 = syz_io_uring_setup(0x2730, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3de}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1568.847215][T29771] loop4: detected capacity change from 0 to 1 [ 1568.851909][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1568.873296][T29778] serio: Serial port pts0 [ 1568.886519][T29786] loop3: detected capacity change from 0 to 1 10:50:09 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1568.940548][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1568.945505][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.954019][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1568.960255][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1568.974182][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1568.984097][T29786] loop3: p2 < > p3 p4 < p5 > [ 1568.990126][T29786] loop3: p2 size 2 extends beyond EOD, truncated [ 1568.998585][T29786] loop3: p3 start 225 is beyond EOD, truncated [ 1569.004773][T29786] loop3: p4 size 2 extends beyond EOD, truncated [ 1569.012738][T29786] loop3: p5 start 225 is beyond EOD, truncated [ 1569.086630][T29786] loop3: detected capacity change from 0 to 1 [ 1569.127558][T29786] loop3: p2 < > p3 p4 < p5 > [ 1569.132515][T29786] loop3: p2 size 2 extends beyond EOD, truncated [ 1569.140106][T29786] loop3: p3 start 225 is beyond EOD, truncated [ 1569.146399][T29786] loop3: p4 size 2 extends beyond EOD, truncated [ 1569.153705][T29786] loop3: p5 start 225 is beyond EOD, truncated [ 1569.161435][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1569.166416][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1569.173849][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1569.181245][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1569.188445][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe2a}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) 10:50:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000090000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:09 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r1 = syz_io_uring_setup(0x1edf, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x125, 0x0, r0}, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r4 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r7 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1}, 0x1ff) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x681a, 0x9f51, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) r10 = syz_io_uring_complete(r2) syz_io_uring_setup(0x5ced, &(0x7f0000000180)={0x0, 0x806352, 0x2, 0x0, 0x152, 0x0, r10}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) 10:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x100000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xda, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:09 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00f003ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1569.561850][T29844] serio: Serial port pts0 [ 1569.568540][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1569.573919][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1569.581620][T29850] loop4: detected capacity change from 0 to 1 [ 1569.588676][T29853] loop3: detected capacity change from 0 to 1 [ 1569.596201][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1569.602519][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1569.613311][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1569.641502][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1569.646952][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1569.655103][T29853] loop3: p2 < > p3 p4 < p5 > 10:50:09 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = socket(0x10, 0x802, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/72, 0x48) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="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", 0xfc) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x5) tkill(r4, 0x34) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) r5 = getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="80c3dae0b25aa54c49d06f222393746b8b3df5e447e3efc1f88f3cd7c12cf26e3e38a9026e", 0x25}, {&(0x7f0000000600)="933521ad497bbf4aecd096e470a09421c61d9572736b90ad616c958b188593ab328d56ea94cd5de52dfcf2ef03dfd66ef5b6fdde071ef7e18ed2de38f3c393a712fabf0d22da77f5a5da569cda80803b1bd30aff7c33432ad49d9a5a46b2efeece47e671a6bc5097667b669dafb5f2bf56b96450f8e9e7e85be8083c2b18532d03cca37021263c31f1969cbd39b2e39194591a4b2d6652ac784730b9af232ef7490a2fc3a7d03583dec72ad6e9a15cb81baeb4e9a23c6ee6b94cee4c9dc419ab91ff9b7080559102845a9bf6", 0xcc}], 0x3, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x4c000}, {&(0x7f0000000880)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000900)="7b3b7a7f06be8b6cf43656f8f0b2ef06db6b7b49be6f257c6dfc465e871b92f6f230b69ad354702255d0d22ed88fd446268375c3cd2481f888d3f2ec1c25894539dc7f57d1cce0df92318de129adfb55a0ab9f1f210464adef942ece3f38c23babdae405cf770f80400c90cc56a5cb7ec53916a4132c30d0ebdf6719f37b00f383b3890b8dea181c2152bca6506fc5b95aa3566d8a003a00e5ca0fb16e0b1d6f103838ec5c85353e6dfe1f890619bd758227cb55c3f124c5813c2db302601715afa798c6d84aa5aeed911d7e4a775f492749d991dd5ed1de0f", 0xd9}, {&(0x7f0000000a00)="93828d4bbe9c89f45be36fa959fdd1cd4ceb326428c9bf8fce0579ad246c7b8aed97b0c20b33bd5cdaea049946396ce3ea9904249c35e25c9ee7dba02bfd9b6002ce9c4580021c29bb6a4e0d1108547becf042ac6642751c40ae42956536f4af17e2bbd5ec7cde0ec9ebb76ca4de5c800e65a170de16a306e5dabe6b8c04b984528119a5de1523811f64fbca16557a09c44bdcfcde3cbda96a1376c7", 0x9c}, {&(0x7f0000000ac0)="8a949b7dae82f299be45ec474c662a4e4afa96a3f3d9f5c888802ac339dc8a38eb9debb558764251d4caa84d6d0144806d731ed36ba4", 0x36}, {&(0x7f0000000b00)="c97d12783712b47b17ba8e1b486d0ffa007607387b885faa633c29f7a21ae8b775266e123403789b9b136de8bf6560a74d78beb8b48eb2cf41bf88d2d05d5badbadf35c4669bd2c9cd841da1697abf49fe0a198f0df77aa88103cba2ee213b87d5514fcf83e84f2dd913c685bbc224f938a4a1579e95498d9f6cf1ddf3ccdfacb56b58f58314a1c615d39b9892ebadf2da4371b699208053", 0x98}, {&(0x7f0000000bc0)="8be016849686adfe308f1cf4279b273e1dac5996a9c47046b2a1e3fca9364287f5115a5ee2f045e069c75cb302245641cf2d95d690feda36cb983aad0f1968e2a332f7b567e3c7e4d01f58166b6f83dbddcf584c99546009566a6a6c619899415503156173d92f553d012f12c0a5355a7e468865c00fd9fe5284c8df0b20e23854555e1123263146f317e3a15226632facab2c2675a18e438f65f1aac90a60cdc88b16d3eba78878a483c34020db5e2e980a094ab732f01da3c28525d9e38bfaa0c935cf823a23d09bcb3bab7d0898197b4987e813d27b00", 0xd8}, {&(0x7f0000000cc0)="669aa4385cedce955302580a83b1a68531dd102cb7b07a7dc13a902414b1f254e1edb14838c462517a7cf753f1962314ab6eeb6719e3be9e735e818b47456afc00dfc1a04bdb528eb63491a01172b03d44fe78d38808f82d841a4d3f53f1711bd7a0f26703a812a3b1173e41709b028de9c5f1d43ece2011057f539a3488af7cd825d011f4baf3735e327313cc965a23efbee2b23e206a269781d7d4fa6c927c", 0xa0}], 0x6, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x40005}, {&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000ec0)="1a9ddc48b5c0b8440addea9d93f5f57ae80431b33faec9d2f8fca21434456855", 0x20}], 0x1, &(0x7f0000000f40)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x58, 0x14000000}, {&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000011c0)="ecb5cba0dcb8b14782af610c52060f9287fd8031fce20e802a3e0055f7b30db5f6c6ad487ebab38e088403afe95713e2bec56ce6a8353824e9e9adab6a2bed1657b427ac6f40b1462b966823cfdf468f279b3aba64c0eabf41cfaa98db455b0e9d45d59e256a97aea1aed8734be110776103430d90cef335da77733f01404da24923ba0e067cf9f9e97213a78bb2bb7f2572150efca157d7a1bbfd18a33c8ddb9c2b56bdc3a8641e636570ec68a47e383005b20bf2721cdd9d784c14ed9923682db5e404f44dbfa5b605d9470ca0b595378e9396cd0131ddf37c724f7a31b031fb8379f7259ebbede6b492a7", 0xec}, {&(0x7f0000000fc0)="f688e7a0674075ee5a5c54bd31ee2a0aadb45aa4756a535a02", 0x19}, {&(0x7f0000001140)="72723de0421d27afa63238788777", 0xe}], 0x3, 0x0, 0x0, 0x4800}, {&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001380)="77bf6170260a7a70dd84be168db7d97fe8003ea08d731136ea90329a42ee9f2a406bf1030584f811bd7610013c1320019f2d36dab7dcc1a58103f1c7e11a1be84763675982cab953d68e92fb87d6152a7251011cb98975b44ad205b9830b20b90f05e185d264fa62bd260a120b9aa361a0db3656abe839deca0efcec1d64adf3dd06da2184edca205a8b826c0c8d407ad6c86bba170b10349052599518417b279afa654b8928459a3d2a41dd8233", 0xae}], 0x1, &(0x7f00000017c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r0, r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0xb8, 0x1}], 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x120, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = accept$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000003c0)=0x1c) splice(r3, &(0x7f0000000200)=0xbe, r6, &(0x7f0000000400)=0x7fffffff, 0x80000001, 0x2) 10:50:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x4e23, 0xf0, 0x4e21, 0x2c07, 0x2, 0x80, 0x60, 0x21, 0x0, r2}, {0x8, 0x0, 0xb5e, 0x3, 0x8, 0x48000000, 0x80, 0x1}, {0x3, 0x0, 0x5}, 0x7, 0x6e6bb3, 0x2, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xff}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x0, 0x1f, 0x4, 0x9, 0x401}}, 0xe8) 10:50:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xdb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1569.660855][T29853] loop3: p2 size 2 extends beyond EOD, truncated [ 1569.669250][T29850] loop4: detected capacity change from 0 to 1 [ 1569.698060][T29853] loop3: p3 start 225 is beyond EOD, truncated [ 1569.704362][T29853] loop3: p4 size 2 extends beyond EOD, truncated 10:50:09 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) syz_io_uring_setup(0x325f, &(0x7f0000000180)={0x0, 0xf6ce, 0x10, 0x1, 0x2ca, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10}, 0x6a4e) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x400000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1569.711742][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1569.712127][T29853] loop3: p5 start 225 is beyond EOD, truncated [ 1569.718120][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1569.735980][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fffe000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x8000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:09 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0xfffffffe, 0x20, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xdc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1569.771785][T29891] serio: Serial port pts0 [ 1569.789786][T29853] loop3: detected capacity change from 0 to 1 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000000)="f31e046bf61ce95bf5970cc7902fe76b72a5904d", 0x14, 0x1, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0x10, 0x2, 0x40, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @loopback, @rand_addr=' \x01\x00', @local, @mcast1, @mcast1, @remote]}, 0x88) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x240800, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) write$binfmt_misc(r1, &(0x7f0000001100)={'syz1', "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"}, 0x1004) [ 1569.847972][T29853] loop3: p2 < > p3 p4 < p5 > [ 1569.853043][T29853] loop3: p2 size 2 extends beyond EOD, truncated [ 1569.864913][T29853] loop3: p3 start 225 is beyond EOD, truncated [ 1569.871230][T29853] loop3: p4 size 2 extends beyond EOD, truncated [ 1569.878695][T29853] loop3: p5 start 225 is beyond EOD, truncated [ 1569.893226][T29923] loop4: detected capacity change from 0 to 1 10:50:10 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000204ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:10 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendto$inet(r0, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r0, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="190362c9fd65c562e70d56da0796afbbe2b0c5912dc7ec8bbe860895f2a100482e6c4fa1c4221deb3d09116e6a92e47966c960c5d344cc1d4f2a0d7ac09df4d3068eda7547fae4a1023b143a612c972d8359b778d0fde64e8d26b979af33b7d66ef21293f54980d6f1126a928644898f58a9b9ffc9d6bc52e6539d9521c9efcda0b226bcee65dbe07c5d246b873626ef54baf80586334bedbd66a2aed2b9180991c34b92d9de7d400aff86ea0f0835f2cc116284a88d4acf3016b3c46e94f0804e58b9543588e9b87bb9054b0f85b9a35d27042d5f24c47fc5896af87806ad1741caf5bc33f317d3942114", 0xeb, 0x90, &(0x7f0000000200)={0xa, 0x4e21, 0xc2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x20010, r1, 0x600a9000) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x6a, 0x15}, 0x18) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x2) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8, 0x2, 0x1, 0x8, 0x2, 0x2}, 0x20) 10:50:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xdd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x500000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:10 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x810, 0xffffffffffffffff, 0x7168c000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1569.984112][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1569.990793][T29923] loop4: detected capacity change from 0 to 1 [ 1570.005294][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.017782][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.017841][T29941] serio: Serial port pts0 [ 1570.024870][T29950] loop3: detected capacity change from 0 to 1 10:50:10 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) dup2(r3, r3) r6 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x100, 0x51, 0x10}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, &(0x7f0000000180)="6f69673377b5c25c84eb3984d7006bb64019bfcb92aa3b3e59317accc3683deb4daa6956649f604ad5fc574c616786ded15da7525d40b0", 0x37, 0x10001}, 0x7f) [ 1570.028464][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1570.042839][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.072727][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.077954][T29950] loop3: p2 < > p3 p4 < p5 > 10:50:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xde, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:10 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000fff000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1570.078437][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.083158][T29950] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.089939][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.099531][T29950] loop3: p3 start 225 is beyond EOD, truncated [ 1570.101772][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1570.107976][T29950] loop3: p4 size 2 extends beyond EOD, truncated [ 1570.126974][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug', 0x1, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, 0x20) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="fc00000048000722ab092504090007000aab2000130000000008e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fa0780196370d115103d633d450002000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ad20d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e98839fe326f082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567a8835d731d05b097331ffa09b62de842276d0098f07da2", 0xfc) r4 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x40000, 0x10c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x1c, 0x0, "c9740fe07f8c4e468f1eeabe59730739e6848e826d5f2f9ecf2606f5358b6edd958c0e2e6515e1831534195df5e9e8d42879ad7e32ef5c2dc20b5389d4c5a88f6d446ea0cfe741bc020401b0de4aea3d"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x0, 0x3, 0x1, 0xc7, 0x10}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) [ 1570.139938][T29950] loop3: p5 start 225 is beyond EOD, truncated 10:50:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) r1 = syz_io_uring_setup(0x467b, &(0x7f0000000180)={0x0, 0x9541, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x700000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1570.187678][T29950] loop3: detected capacity change from 0 to 1 [ 1570.202818][T29985] loop4: detected capacity change from 0 to 1 [ 1570.215802][T29991] serio: Serial port pts0 [ 1570.227697][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1570.233069][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.243741][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1570.250386][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1570.258553][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1570.266347][T29950] loop3: p2 < > p3 p4 < p5 > [ 1570.271510][T29950] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.278745][T29950] loop3: p3 start 225 is beyond EOD, truncated [ 1570.284919][T29950] loop3: p4 size 2 extends beyond EOD, truncated [ 1570.288008][T29985] loop4: detected capacity change from 0 to 1 [ 1570.293462][T29950] loop3: p5 start 225 is beyond EOD, truncated [ 1570.313946][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.319122][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.325960][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.332234][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:10 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000604ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0xa, 0x4) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:10 executing program 0: r0 = syz_io_uring_setup(0x1edc, &(0x7f0000000400)={0x0, 0x475, 0x20, 0x0, 0x10000}, &(0x7f0000ee7000/0x12000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x13c2, &(0x7f0000000200)={0x0, 0x114f, 0x1, 0x2, 0x1f8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x592917af, 0x14, 0x1, {0x0, r8, r9}}, 0x9) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r10 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x250313008938bbed, 0x0, @fd_index=0x2, 0x0, {}, 0xfffffff9, 0x0, 0x1, {0x0, 0x0, r10}}, 0x1) syz_io_uring_submit(r11, r7, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r13}}, 0x437) 10:50:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xdf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1570.339869][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:10 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000feff000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x800000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xd6, 0x4) sendto$inet6(r1, &(0x7f0000000100)="942154233c1af84452ca18864b7d34f262ddeb209cfafcfe867b5bf3ecc4d5b1738c2bae5d68dff7a76eb0fea46408af677b0f0401ee9ec0510d05f7bee18361db04f56ed467eee3dc8dd7c9c803089d2333b800f11e1354704cc8d79fc1ff65db1c7b4183473547afc1743ba53d9dd9cdc5aeb7fa837d5ffd63987f3656cbdba446bb74011f7350585778648f99a476008bb477d36b8568a523ba7baafcbd6ab895dc46bf3b3c66564f39d1d1dcaa6de73fa3bc51138c4f6b569950a4ff4c381c98e4b0fdd87481eece2bcaf6484d60593e5024339935ad9bec378266ac44261ca123613946c5320231", 0xea, 0x20000080, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x3ff, 0x4) [ 1570.397294][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.405285][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.417450][T30037] loop3: detected capacity change from 0 to 1 [ 1570.422912][T30038] serio: Serial port pts0 [ 1570.437769][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:50:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1570.437823][T30043] loop4: detected capacity change from 0 to 1 [ 1570.444001][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1570.451887][T30037] loop3: p2 < > p3 p4 < p5 > [ 1570.463602][T30037] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.470276][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.472688][T30037] loop3: p3 start 225 is beyond EOD, truncated [ 1570.482667][T30037] loop3: p4 size 2 extends beyond EOD, truncated 10:50:10 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x80000001) r8 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_setup(0xa41, &(0x7f0000000400)={0x0, 0x5fe5, 0x0, 0x3, 0x281, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r12, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r12, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r12, &(0x7f0000000200)=0x80, &(0x7f00000002c0)=@sco={0x1f, @none}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x3) 10:50:10 executing program 2: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0xa, 0x1) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x1ef, 0x96b, 0x1, 0x7c000, 0x1, [0x2, 0x7, 0x7, 0x3]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) [ 1570.506533][T30037] loop3: p5 start 225 is beyond EOD, truncated [ 1570.527740][T30043] loop4: detected capacity change from 0 to 1 10:50:10 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000020000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r2, 0x1, 0xffffffffffffeb2d}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000040)={0x8, 0xffff}) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1570.600209][T30037] loop3: detected capacity change from 0 to 1 [ 1570.633299][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.638283][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.645250][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.647558][T30037] loop3: p2 < > p3 p4 < p5 > [ 1570.651533][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1570.657772][T30037] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.669625][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.670556][T30037] loop3: p3 start 225 is beyond EOD, truncated [ 1570.682995][T30037] loop3: p4 size 2 extends beyond EOD, truncated [ 1570.690823][T30037] loop3: p5 start 225 is beyond EOD, truncated 10:50:10 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a008004ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xe00000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0xb6, 0x4e21, 0x81, 0x2, 0xa0, 0x20, 0x6c, 0x0, r3}, {0x4, 0x9, 0x1, 0x10000, 0x7, 0x800, 0x81, 0x9}, {0x3f, 0xff, 0x9, 0x401}, 0xfffffffd, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0xff}, 0x8, @in6=@mcast1, 0x3504, 0x1, 0x1, 0x0, 0xfffffffd, 0x6, 0x7}}, 0xe8) [ 1570.709364][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.709442][T30097] loop4: detected capacity change from 0 to 1 [ 1570.724261][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.739964][T30102] serio: Serial port pts0 [ 1570.742123][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.750661][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="018c9cc30c51c010557dcbd4ac556b8e93bfba2fcd8a3a3bf8b0d882db1caba07f09994c0f85f8eeb8957c5e5d676c2c60998c509f08ffadd66a7ca577d509517b7258329f7886f203437a519a2d4a9c5270f5da8aed8c2290a78cb69bf3556b256d6a7fe20145d02d23403467194595a7", 0x71, 0x8005, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast1, 0x800}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x1, 0x1, 0xff, 0x6, 0x76a, 0x7d03}, 0x20) r1 = accept$inet6(r0, 0x0, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x81, 0x1, 0x6, 0x0, 0x8}, 0xc) 10:50:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="7a44eb6fa6bfc86bfa7a08e9aa4d35ebd1af7f663262fc6643ae0316953bfd795131ddcdc0b85eca59d916739e0e03c34ca5e3e4aa85461be6d6ff3f5c70016742b17b", 0x43, 0x80, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7f80, 0x80, @empty, 0x80000001}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1570.759276][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.778821][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.783878][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.793304][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.799653][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:11 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:11 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x100) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1570.806709][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.820550][T30097] loop4: detected capacity change from 0 to 1 [ 1570.834440][T30128] loop3: detected capacity change from 0 to 1 [ 1570.885543][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1570.887588][T30128] loop3: p2 < > p3 p4 < p5 > [ 1570.891259][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.895680][T30128] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.907147][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1570.914445][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1570.923627][T30128] loop3: p3 start 225 is beyond EOD, truncated [ 1570.924480][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1570.929887][T30128] loop3: p4 size 2 extends beyond EOD, truncated [ 1570.965632][T30128] loop3: p5 start 225 is beyond EOD, truncated [ 1570.982286][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1570.987150][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.993996][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1571.000338][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1571.007437][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1571.048044][T30128] loop3: detected capacity change from 0 to 1 [ 1571.059994][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1571.064920][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1571.072178][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1571.078906][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1571.085747][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1571.092837][T30128] loop3: p2 < > p3 p4 < p5 > [ 1571.097843][T30128] loop3: p2 size 2 extends beyond EOD, truncated [ 1571.105098][T30128] loop3: p3 start 225 is beyond EOD, truncated [ 1571.111353][T30128] loop3: p4 size 2 extends beyond EOD, truncated [ 1571.118988][T30128] loop3: p5 start 225 is beyond EOD, truncated [ 1571.120072][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1571.130127][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1571.136915][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1571.143154][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1571.149930][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1571.170308][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1571.175078][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1571.181939][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1571.188168][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1571.195074][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:11 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:11 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r0, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/146, 0x92}], 0x3, &(0x7f0000000480)=""/149, 0x95}, 0x40000000) 10:50:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000080000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:11 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 10:50:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:11 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00f504ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) [ 1571.547437][T30198] loop4: detected capacity change from 0 to 1 [ 1571.559786][T30204] loop3: detected capacity change from 0 to 1 [ 1571.568351][T30202] serio: Serial port pts0 10:50:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800004000080000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1571.595477][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1571.603248][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1571.610849][T30204] loop3: p2 < > p3 p4 < p5 > [ 1571.612717][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1571.621802][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1571.627792][T30204] loop3: p2 size 2 extends beyond EOD, truncated [ 1571.630676][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:11 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:11 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/176, 0xb0}], 0x4, 0x5, 0xfffffffc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8, 0x1, 0x1, 0x9, 0x100, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@empty, 0x80000000, 0x1, 0xff, 0x6, 0xd10b, 0x5}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x7, 0x4) [ 1571.642978][T30204] loop3: p3 start 225 is beyond EOD, truncated [ 1571.649278][T30204] loop3: p4 size 2 extends beyond EOD, truncated [ 1571.671766][T30204] loop3: p5 start 225 is beyond EOD, truncated [ 1571.680198][T30234] loop4: detected capacity change from 0 to 1 [ 1571.710051][T30204] loop3: detected capacity change from 0 to 1 [ 1571.726267][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1571.731832][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1571.740493][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1571.746687][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1571.750608][T30204] loop3: p2 < > p3 p4 < p5 > 10:50:11 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xebffffff00000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1571.765619][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1571.791775][T30204] loop3: p2 size 2 extends beyond EOD, truncated [ 1571.797716][T30262] serio: Serial port pts0 [ 1571.803337][T30204] loop3: p3 start 225 is beyond EOD, truncated [ 1571.809612][T30204] loop3: p4 size 2 extends beyond EOD, truncated [ 1571.817772][T30204] loop3: p5 start 225 is beyond EOD, truncated [ 1571.908419][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1571.913668][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1571.921481][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1571.927769][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1571.934866][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000400000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000008100)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="f0163e6be462e059b8c8657d1bc7ceef435f0a1eaffbd170a8b592d3dce9b511a6e9acc57c002bdc6b2ec4678d76e4b9ab75e264f2ec36855503ced5b20d8d65bfcdd835060f256609cd4c075d110c21750937f0269a37152e76accab7e747d54142b9a0163e24b434ee0fb2ad87c9c2f5104d2293d0f30057d7930b119ab5d5939861d9813b14ec41b4995bb5da36ab024d3f75c1b800e759c2d6f0e9", 0x9d}, {&(0x7f0000000100)="5e50490f084a537f5b7b1ae451a91346056361edd4f67b3e7d4a9e2d0531c921e9fd0da972f6b99ed97ac09be5aa26d8663eabda9f0e4515875a3712835fdc157f3256ee91f42367457765c9af795a93627a4d61c4e75092fdcb7bdf5cf9daf92877", 0x62}, {&(0x7f0000000180)="15cfb2191bdb40a9affe5dda1f1a2cc9a2654762f46bb3480e2b638006886d203abc6354e61dc7173568d0aeb61271a15c5b9e10da6460b3e6d206b7c11c97be7156160ec76f95be9dbc5b327e3565ecf225a636311350d71ebe2967bdb0f25f0e0644bf1c3b883b2b512c3a107b7c2d808b690d51c378404be77845b00b451647a567ad62d839af1b6d567a8ea28380e4434ee5721b20a8c1502ab6eddeb3728b0fbe9c5d23273d5a8682", 0xab}], 0x3, &(0x7f0000000280)=[@dstopts_2292={{0xe8, 0x29, 0x4, {0x11, 0x19, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x4, [0x1, 0x5, 0x8]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x2, [0x8, 0x1, 0xe28, 0x3, 0x2, 0x8]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x40, [0x6, 0x5]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0xf9, 0x7ff, [0xff, 0x40, 0x1ff, 0x1ff, 0x3, 0x7f, 0xfffffffffffffff7]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x118}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000400)="7d585df797d2b850ef240492ed2715fd314ccdfb6a7b378a473d802c2352c4a992a64b4d1b32797931b4e2c634eddd044da9a03e354828db0f8430c8c5cd3591460c23524a66f6b387318adfafe32d09334b5badcbff2d9b26bb62ca24d6e15e49661183290f36a1feb1a4edf7ac27ce87a9804300303a90558defef7d6c054b2c303f72b1f89bdfad9af1b86878ac77c1eb6cb8f2c6bbae144d69ff45b5ac6d0570b17c365f4b5d355c6f2b82ea4055f81b606991d219c53d90a7d20131f0107e25123ffa5fc5eafa7fc1526caa25a8788f60ed73334b3b836043a159d1b5a55db635dd9e06ce501042d115cc8c9db3bd2e14aed2da4ff7", 0xf8}, {&(0x7f0000000500)="8e0811dffb9baa94d3", 0x9}, {&(0x7f0000001100)="084edac0ebad27587654d8f76dd1fb326c37c12bbb540abfd36e8763dcc2da11f5280399b3aa59b7b09bb84c817e2f835197efdd4983e4e03d1353ed605b70d1630660b06ad8404a6211d27531a40edf36fe6ea9d08fbb294350d8b2090fa438ddb79311dc59c65962438cb4f6f6442fde624fdc5adad55f995997671da1245877eadc100383f873ecbb4a8c97b5b7f803a8973987c3dedb04d217e0d8da7c52c03b4bd9de0721c2fe9246e527572283c6562006dbdd8fb8e9eee158bbb338254752cebec9c84512cdd0955cf0f589634c95ad85d8100f7595d6b337897a1c16cf8399a8eba454e06cb8ff72d58d179104e7d5860f7a827672fe9f65afb614b804899112e490879ce2a6952d8dcfd1973e363dcc1eaf92b897444481b0d9b085b7b5b1a3d7394e51a657320b8e6a693b556962af0b239373807de896bb1d2d5e9bf8a5f167bc5f45ce6e9102e7b14c8843544357c551ad39c7bb6fc90d035c5fcf5a020196f7a5b85a901ed41d85462f801b38bf352e1d70eb088ed9cf2970be619344151048b8daad43fad59c65c9ff67fc1aa4d5d0b88abaf9df9dd7fdab6a7f343276e96bf1e70e4f2ec5acd70718787c9e15fdb4e9800c65a3ca0f378ec48278fa0efd88055d40926f2559eceec87ad442bd3c35cd903efe0f070ee9906911e78766ed50bc863681436b2a5035cb2a1ded99eda151c1e5dd697ba934d875c761560108f9bad86e8d5f08f682d0d9f5953163141580981b08b9d428ec94bb91bef89039c8d53a3026a532f5e425eb0917f953fca9eef4ae5c8d0faa9439b94c973b777c98c04730ae919769966d259cde0234f9799c5be079026499fdca54d61d152e05eda9248ea0b2dc9a0835c9969186bd55a1b77927e2f4fa96f8973c5783b4eb6a8ee6ce0ba3550f58feacc15551708e99f528f5ed00315a300d372d05c8ad847d161a1b9c8c6f1041e5dde269eddd0206a4943538e70237d55010e5cf0c8e7b6fc40e4cc3981a9ac054676c26d15555e9d2e89eb7d7f98cc67d4466b257e5454135a9ba4c898ba6bdc6e19411a9210f2acc2bc1584e611c45a7a2f60775f6cba00f634f532cc391d2ccb89fcbe86732df98b2a4c750e61abc2ea7172cc453fb2b59284e68b165aacab250e0513f43d0a0483d6b11e35e2fac12faf46fa3c0e4f750895badadcf629cc1263ea0221d4af2fe0e3346d013414d7d4e72af2df1e6c481157e0275a68f346a95098a14ea33de98a64068d22263b64a8eed7f48355df7a3f25ed15aed82640034eca5ba33c00efe01664bf43a112d855d48bafb42d84bf93bf7647e03180c7c967a81492073d62b4fe2d60b567c149e44ad3d6bee74faac5deec556bb20bd1b80900007ccc3aa8d34fa555272eac43012c9ff6be7669da2ac95e2b1ac96f28f7dac62cdfcba16fabf63b32c2762a4693161c8431f0a7a1bb33a1087130df44dbf1b73a58bf4808a8f70b5f7f6d2c960903a18c6f665bae4f6f23636754007aaf722eb6e828f31f9ea674c78b874935b1b61c8d9a630205dce74ec554f887fe2dd24125c3cad8548126f38162979977537ed9ff7242644add67dc0a5d80ac31d574407e09005fc451a3187bb49cf7cc82526c783a423fbb4d2d7670e051747db369705789b3206e598a1bb5e6997179eb98084e132af59ce453215dd8ba3a79aabf927bc2f3c51e7541b7066e39c16d7d06c98967826617f4fdd8389e8f0844968db3ec3294415b12685d1b95152185457d814b5f23652905b409daa62cae971f2671a70fa805bc5979996140bdda329bd8374105179d031155bf0223c6848824b9a4ea64626af0e50ec2113bee85e04338e280120fab88ed75308cf92b62631cdb70c6d1be037a383adc92fc33cbd4b10a979d1b4c3c5dab336f1d71f763a75ef2c0ae9e8d0fd4c1e27c24d71952f22d9e4990827ddbce998669cfba8fc454f1503d5072903bff6519dcea7c094396b3483085bdcbc5e259383e2ec651481cca977660b53456b3920e3bbc53db12941d0a53ac55c92839040454f8ac106593edc5aa2a22b25ad67018b02281ed921f60c5a2618a3f4be6766569017f61807ace05b8182c957be07c0b8b0a5ec9e3b1237e723732020e70810f7dfbe3cb5524c41fd934775003454f7a734d8bc8f5046b9ac635c48457996bcfc189a2c185a39a43ecc948328a52014eb66469e50078d2f89063d1a40d20dfd1643dd337c04de953395f4c5ca87ec882ca67bba56e739facd22f3d3b982e438665e76c6b6cb3bf87376758bcabd843e6762183ac4df6bd6b8702af463ecb1862faed65b65e3ef3e4c8a25fda8684c594e5d93cd725dd6892dc9cc6ce4e8b5e988d443e7c73f308d20f18aeb0db5498ce0fc9b60f86f9c2e71510c3c74a33aae0c390b4ebd940665e2027772e2db9500795b7803587b912c7b51c7c970d283e5c231db32e1f6783a143bb61e9f39d898ed11dae672e02dd2a8de26a6c50b90df28c6b5bd337972aa3c5fbfa527067fa9cb56495654530ccdc6dec5f6cecf79860c84c07b632afb3fe06892999a2cceb22c62fc3743ef2ba63cd544bae4a7f4fd97744e37239a6f686d4c2f8130f2f992cfd0942f4bd15cb7a9e9882a175be32d26d70845a3c7d9a1143e1c742f7e1a7ece7a6a5369e089be6c83c8ef5cfcd3e02f8a9f8182472b05255eb750a3723d9da8436dbfb96a167d664eaa1fb5363f9f611eef49f4a32a8d969ae5aca4876c62b2b8977fa51350da07f1a64eb0e8697f7db71b119b6e5fc9395b3adc39c1c162715aaaa07ee06debffeb29542fcb74fb9c74047449a7919402837bca88672421b369f2706c4d2bfb437017737dc4cd5b7ada76ee683f89a439b3326b12ff2c749bed0467e6744917e502bc5128b847c5f855174fb092306670690aeaa336d1058935a2999c59375565f90b8657019225424358143eefd08727bf9f9b78ec68acae3d60ed7336d1578ce16d50693903f0728d0d4a8298125a4af05f895e6b538a61fe939895e9808504718761eec63b169768a683aea284c78a0106f0947c10bf467629f0880f76b40b6279f823b17054e18576e9c398ff4a135a1375a7a2bf6b45dcd845312e9df8b0896d9e2f89c0d2c1297e4e4be00bc3507d7d700c3527d0e295f2e0f00645173a634f9dc9ea48f11147b510846d1eb97524e8d2bc7b24c2582f4276d21f31be5eceef60b33e50acf5f751baaf9cdb4bedce5b2428c651ad57153b6f5e056efbf645efa60e4dad38ada63cc1fbedda2b1a5c749e2dbdb9c02071596fcb41bfacb837327bbd271c94376568848f15944b901c17abc02f9980361d2acbf56bc278654d6564a709cb907363fa9466e5e10db64b869556e9e2ce47bbe4629e8e65d9390fe62e58d8f25f0e217af7c2912861ed970a218ebc786878949fea72d948c19dcebbeb98897aa83395ae4d8af878e4013be4a9eb1c433f2475b5c2ba204fa9339c852bd18bd0e6434e227b0d0acfb136ccfd9c1d49078e4c2c7de72ed49e7847196cd96ddf15575b811674271c0c6a75f1b4f30f0788f0347e066e7b9aeb850720449e08fb1a86e148793719fdadc759447b94e81fa103648d76f6cdff76e23d931c0c0d9146ce657326d6debecea75630222968d0af1e935847baa268d9d91744b0a369a2b9553525e6a2175cd5c12f3302bbe2e149cffe29d5d4d1ba11d8bca88f95708d8a135bad0c920b7e10fb2c98b97864d37d677e77cbe008b0fdc610729daf4d9eaedb245f0a95f4cef5d64244fa8a642add7c95b1bb1651f9e68e5bf91d612221e2baabd1a8ddd9426070813c6a34d7013528e5948221835c4f04c56e8b4de3ee0db6cd32c0375bcd7a9a999325e397241532e4d6e6b8648e8fd422bd2eec63585f9ff7f3af2b8ab29c29794e0a01567d9e5ccd84729f849ed018cdefe9d8a4805b6975ab68ca077be5ffdf1b96eb41c8676063b98eab65b7f55d51c6e2ab1da8f1632de2dcc2d7d9c3c75fba04294134622864575317dd23d6090ba5cdeb13b0c2c0664869cb28c0224ffdff166d1f8e651185779cb8c2481b33901f93b5fa338e3fc64fe38470ac06fea618cdb85bc13be229961d6b97797906401c3fc8c5110c2b0dba39c6cee2dc17228411cb6d065ecf4d7dcfd6d6b47aad0d75bfb7b181be15e1fd354a2ce64577ab72a5dd90bba118d8d69c9d499cbbc6bee7a1113da391a88cdf29e906646a06504c03e237c5bc5571b1945ec6c1a6b4a980c17ebb898423545fcea9498df07d6b2ddebda9dbc0d83396dd2204d3743af73539a28ad025d2f17bd1fc98fc82d253b199d4f5e8bf7fde2b6d23eb5624199c6446677611aeaaaf86349bb534682b2a4f6300f425363e8faaca0a9775510be0cc947209568bbeaa7bcc7b34e98e4bfabf99ddf39ba0f73f6cb7e46614452970429d1f683a14465affaeb5b56f1074780cb37cd59b37f3cd3d46b184e78f4492c324da4aa190a055506dfb296620cf366345a79974309f845475db2fa7bcf35bd3287a6d265c93f4331fe632ac75a9e00f30a199fb50bd3eb7d107053dbe01203b08156b1bcffdc6e468a71c5997e85e785f05e5bb0a102058bf3199032b7a79edfb5180e5a1e0b47c47892cbb97e9f8a40a25a9990619d50f761fa3301c4b77888e01de8b966ca9dc74b7656444f577626911a3c0f90b67749c5559e8014840dfff7cc2029f8cb29f62c9f166f0beacc148dd8c8c439381963e992a44088be9593bc65954c42d313fd554bd349ecb59eaceeaefa8b259421c1a501904025b3be4973d5d4e0416a2a837be604b142544062ddfe7d09a78ffe8aa136cabcc613b5ab7d124c7fe64d6a9001d8b48aeeefe96ec660faccaf4f8a8684a1eff6f2c75034e59575b3596e7ed209e9c51f6b9f271404708d238e20b90ece22f4de006c974c52bd5283a170c223c41b40c3b641aedf363d7a6fdf993e34f0021955fd8059d402417f1e717cb591f8e14751a4dff8ab86957dfb4ee5d83521d3da768a45eb75cbca768aee8160a59a205e8a7c8be1c661fbd80a36e434679bd53202a02dc1873a7b4356886ea905ea3bac3ef519544c136417f58103e46fd298a981a9a3e6d40046710b097f2503f87271ac273b8c816e4a21a2cf8c40f61d928316e9600938d59bb157ba4d51419b34d9cd7550dd4b88c261dcee34110cb23148464b08a8b6ea4f0967b4afe34846048d5d6f7b09f5babf75b058e0ea0b39893dd538fbb9308f6bd9b6a7570c4239c34ad4b69eb0ee142f5f75374039ed286b3e27b66fc9090a8811d1892e2ba46a25140c158127df09ac60c1b075553d4c0294350ce283ec73d056846524901df79664165953b4b44d99947906b6c41354e35d06876202705268fb473a9227d6a85cab35049b48f59f5b7f825ed9fe8125fdfc3eac703c632d23b8d7d6a52abed9616eb09897a3c1e5863bf4688deaac2f7a7e53d683f9195421ce35f0c8d86cf29e42181123f4893e99d6e2a85a6686fe2b7436539fc47c9f46f3887d6d439c7c63e6c27e5f96aa53119b520e219716a739b4ee517350c507b8fc5aa8082a4d9bd8905421172d269fb31342afde03ccdaea55161c050ec65b400bc8937cee3f570cc32a8ad798a7ef89e6ff4ad928a153da13608864e834c3f90fa0df51c3a5d32d2c707c06d2a6f78791c95187a8dceb34d1ea1fcb3c94f1561c571f2b056705f08d7324f6515a5d7ead05c3efbb24bfe79d56edb998aa49b35cfdd77598ddfd1a02c8a5be7606f0df8c7967e3a0f5f99d2aab91abe", 0x1000}, {&(0x7f0000000540)="1ef110320fdb2ac66b1b2804b5f62a09783986114ea2ab0f2c75c30e26bb61354a4ad711e2fd38d76dc2323cf2f7", 0x2e}, {&(0x7f0000002100)="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", 0x1000}], 0x5, &(0x7f0000000600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x2, 0x2, 0x0, [@mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @private0]}}}], 0xc8}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000740)="d9a944e1712f4969780e4dd355d9f8f760544d6b894d4de6e95e6379ae68bda56d1796bb78acb2c90ef887bf8a3e697a65bf2d1039d2d55b5e929bcdcf4b034017742126ef28b5e11ed83a3c83bef7623bcc9341ca0434fc98", 0x59}], 0x1, &(0x7f0000000800)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0xe365}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x58}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x14000, @remote, 0x10}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f00000008c0)="84b98700cc9c2dc8c1b3408571d88448c34f2703bcba34ff5b8e46b8a7a83fc6945a2d581a33cbcd675ca6f3af", 0x2d}, {&(0x7f0000000900)="f5690a1e1477643fab7f62b56ed8366fccb07127cef1da8256185e184005d86acf484323b737c532f5e6d227c1d9b640ad32383031304c17333e0b35de0f42f8ded1f8731348a009b58b5f69992427599f26aee165560fc4c0ef53cecd6456d52e43f14f355703d28b0c8a0e6566a1bb58bf47abd24597532c0dde1091a3d484bb2162d0d1ba116fd38b38a0edb12b0d47fde256", 0x94}, {&(0x7f00000009c0)="5b8e3745fbee6938dd03206467ddbad1f6c613f616b0a43cc6a2f3ee407aca1555c1c81db25795c4c7cf9591d023403dc54fc41e084944745b8dac5e70c31d303719b00546550b3edd0eb12a91b4cdd78ca6a27dc8c110c43e61532cebb5fa02c910cbdcb1c093a1e2ca9052b20a40266846b6678b976aaa93f12ec9b240879dc669dee991f0bb4d0eac0371fd23ac994b05", 0x92}, {&(0x7f0000000a80)}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000000ac0)="b1b6e77d89d769f479862457ad4f2b8b88ce97f48e07911ac5b0dc809fe540f039edc5587a9d3d1f0aa6d718a29492fa25f1", 0x32}], 0x7}}, {{&(0x7f0000000b80)={0xa, 0x4e24, 0x34fb, @mcast1, 0x6}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000bc0)="976cc883d9170282ab29658e60d2772d845c35a2e35a1c8f2b8901a03abf14b5b45a3aea65d7d26f4d8963cedaeb5689ce26dc2048bb3f2fd1976d77c24da000be0acdeffc0a5acd52e225997bd37b523b09d1b4696379", 0x57}, {&(0x7f0000005100)="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", 0x1000}, {&(0x7f0000000c40)="c66db1fe71c14beab250024c305806ba32cf563ce9d9ce3c6aa753770cd5767d0806ffadc84c440b5792233d5887e65cc982c358c722308ee6faec40222bce0d2830b77d301f26412bc4750904838b28d2bad5df19d5b3ab860f7687946896cef6989fe33b778b4143bd6bc5374dcb59a7", 0x71}, {&(0x7f0000000cc0)="635998f8525a06e58452ab7e88f6dd27c6e01b828bb94248affb29b86014fee7a2570a501d64ce40bfa6c36e3e4d923114b1b951da60f7f1de03c64b7b227314d344c80709cdd3dc13018328c17ed36dcb637f9f0601b15ca4eb1defa2a2b987c1582329528978223da7", 0x6a}, {&(0x7f0000000d40)="f3c0b4cb572378ee74a0bb4942fa6f2bcd77823fa7fa1e9664b59d", 0x1b}, {&(0x7f0000000d80)="85627a5fd2", 0x5}, {&(0x7f0000000dc0)="d4cfb11192afb874ff7a20aeb81df010a95b76d98702d49568f40419f8c59e6a67bdcedfe56a04dfd3682f8ca046b932cd02b0ca83c2935bbce91312a83a56ce5870cd21a1356a42f2d6c49618e3780e833b2a4e0a6df363589e9c1439a268a7f24b28bcf4fa302f114b098ebbf11fe8507dc422e02bf38002ac4c2075622017dc01470c1193c2e3e1361ecb1d0731a27087c7eff47fe2887847cbeb6e6927c5baffe47da0ce8f0b216240dfb3fac675f81505466d72d6ec94c18c906ba6c018b0fc89494c21a80269334fcdb4904b936a8fd015122a05c69de755cec25fe15e47c3071dfe751d6346fe36", 0xeb}, {&(0x7f0000000ec0)="733913583fe745a45d97fec3b16cd75962894afa0aadb57cb2c23138b5452480bfb72044b8e8ebee46a0a1acaee2f5a125f6b166dc066660c1fbac18682f252285bc6502b8ac51f1394e22df3626b5e716f82f13a332c75103350703bebcc63fe111c6debed2c581", 0x68}, {&(0x7f0000000f40)="6087c307d92e63c1d3", 0x9}, {&(0x7f0000000f80)="6373ae9627f4d9fe1370a412999e9fc9ca71ad37184ab75708352a3fe3a0017b671250498570a4e89792affed7ee882f3c62d00b12ee9cfc3c2d73ce35fcd1f4770a0b5a321cab04441dd24bc9756c1208655d02ba01241a2a8508b8b581cb7dbb3e2f941a2af6f3c43eb86a0a026fce9ecd278b6011779394abcd1f24d219", 0x7f}], 0xa}}, {{&(0x7f0000006100)={0xa, 0x4e20, 0x26c, @private2, 0x3}, 0x1c, &(0x7f0000006440)=[{&(0x7f0000006140)="486aa8132136c63f1b216a9317cde7c1b700da84b00c231187005ebd21f6158dd70b3643436535a34ec54e483adffe430d1fc5169fd81dfa7c45fdaad9a273f593eba97aef56b9655de1348f93c9419531568898826291241b2ab6e077f050817df57b56290e3fe0f8ead7be37adc67953f8dca29a41ec9e9c7dd862e0798409cdaa441567a5ebfe113b032cf0ad23c40fc3ce395c9719de3e66eb1fcbf990be997e55a6d0a9067f754bb1aff884073ee7db62a9f747564e6cec0f1d73856a66423877a90b49", 0xc6}, {&(0x7f0000006240)="13d6857cd761f7713b41dce03ba05913dc1bbab21714029082af5ea92c2f7ec5371c55e613c698a795cc05f29c54a697de2331602a32166bb05b", 0x3a}, {&(0x7f0000006280)="4462c9221ada1ababda39c35ff699fb1a16c0033d2661d611a086ab9690ed37ec0b35c1b6bed8d360840929da91d9811289485ad0d124f58de74617166c44d8ed4856db55955eac1e818522bea6d2c5c2e13c8e62b2f99417ebe47f487c04dc78611e3d24afb9960db3fc81e9728050b04e105", 0x73}, {&(0x7f0000006300)="9b3e13273a4fa5f40bc9660f2459e3db1a8dca75431ccc244c8d5ad214096a17d0227574c745cad1f8185e58c0502dc9dd9dbe123a7687b52d93b0e0add8", 0x3e}, {&(0x7f0000006340)="6f036ab295718a9ed04669be11fea8bc134e34d8f07090f4c3a0c54c6452b9267e53c909c184c64c852338ecc2daf3a93b465065608dc14d46296cac39065152b8073ea3b3f0ff229ea198c3692aeda6cc3c3b7cc9b215f0068e6fe8d2dbd05ce53879e2ccc91a9496a466abb99edc698c2fb9d69245ca1f4b11555e2a3a8fbfa7fc169451c45b02d58242feb728b9a5983483adee12fa55b59181a832cacda51a873182fb3e0ba3f29c4a34327a43fd800235be227838cc70d90e12428f6cf1aeedb34bfe61db8e3aaf52a65437d61d9a822146006645cd28c4e2552104bd7e8e825e61ed96bc7b06f2b7b44998", 0xee}], 0x5, &(0x7f00000064c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xa610}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x30}}, {{&(0x7f0000006500)={0xa, 0x4e20, 0xaa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000078c0)=[{&(0x7f0000006540)="22411d1cde1c06d735dfc1b2004f9143674942628cd7fbe05e6664629ed7e2a6ec39f9e0cfbb075e6a53c59eb75de9fed659f6ee19065de74778ec0d84d2879e7210337f74f472be5fad1cc882be5758a8bdddaab423a8aa5535f0b843c77351f47d8fbf3b85f1eff74ecad78d7b7f20a3863fa3ac6156b7f8577b1a2121e989e3d8ae9f3409dcf46e9a185ba4c30de48763be24678265debc455e9c7d069997a517886cef28304cb68d2336297d301da3faef8051f51bfaedb7cf3500b466872efb0ee492adc4b3d4a1ae3298ae76ee7e66a6d5894b5ac218a919ba9ee0", 0xde}, {&(0x7f0000006640)="5fd0009c52102a14ba9b214bce72ca05956de75a9fdfd2bdc84f7a9866c4328246db24a6088343d5319a933bcb728e6becb66039aa4153658fb2d6bb6a6761", 0x3f}, {&(0x7f0000006680)="0aa757a9f3f9bcbe25b2cca1c044ab4b3456577135f11b347377c3e2d76ed9c4a9848b90fbb88de2aa1f827b44b1c1450b70e48466820072682dd5777dd6fb87e66b38eaf530786ddc7b1dba1c8c3acef420c8473e3520ba761193cdd1d8abc4e3579c61795599ef3f844b0e905620132b69e71ecdfafc09002d7f9369cac0dca0f0309cfa7561ac0a551ce30323d4d15fff34f25098c8e38260630cf0c49f1084d115501ecf6ff9cded296d0c1f637fbcd2a5a71a6866225664627b1c09", 0xbe}, {&(0x7f0000006740)="d0c856feb5b4f34eed192476b241948e23148bdd9beec9ad63da3a6479f349b9e6bb7b6d0c6d1bf6ce", 0x29}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000007780)="ba164de2999c1f22b554cedffdb0b6d5de6fc2ac2e7ae685299fbadb96a6913bb6a9abfd3eb7f0ad798724844226357e5fe0605270cde0a8dff4945cef3929078e9af407721b6080cdce7ec36056957469e56e2b54a43e7dfce2c7e6e0fd4742b3aa51d2", 0x64}, {&(0x7f0000007800)="76785834460fb7c1191189889159bba241a6a86ea7e60059b1406957d1de94d855889a6f3ed658454088fc28ebc3ca527753ca9e3d2f0313464ca03e576f7b90fc69f384ccc653d80327bb43ea081816da92fddd057bcd8978b719f0fe479bb878c649e3fb0ec631acbff29d6e5c0f79d859c3eb21880e472117001c8774d489416978860b2160035ad4661a481669b717f7231d7f6ad6ee565ed3008af39ae5ca5cc8db670a49a3c841b5", 0xab}], 0x7, &(0x7f0000008300)=ANY=[@ANYBLOB="28000000000000002900000036000000000100000000000000010004018105020001000000000000140000000000000029000000430000005b060000000000001400000000000000290000000b000000fffffff700000000140000000000000029000000430000000000000000000000380000abfd1a9fc954981c348619328e00000000002900000037000000c603000000000000050200090103000000010600000000000005020005c204000000080000000000140000000000000029000000340000000000000000000000580000000000000029000000040000002f07000000000000050200010401030730000000020a1705000004000000000000270b00000000000001040000000000004000000000000000000000800000000000000000000000df86ccf218b7859461b27a370e94d297ca8adf46d9a80f0bf159a55868fbca929f7ff0042aa86ff91c"], 0x118}}, {{&(0x7f0000007a80)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c, &(0x7f0000007fc0)=[{&(0x7f0000007ac0)="53dfa69bbb1094f2037d7a58b01b9bd8bf629df025f6d5b63c6e19d5b4566e5043809b9949025e147ced938c05a15815461dac945a0ba7a9fa4386991e941c3690bfdbf4c6", 0x45}, {&(0x7f0000007b40)="a211d9137bf5a6fd43343305c7ee726e67321406a5a81ccb36cc78aa9e67581ae5131c0b25c9d2d57a2fbc727137d4005cd2143cdcb08fb8865f02dd52f51c67022a24a38d2d3f1755ad8def49846626919802ffdba6fcff478a63d5f598a43331f6a9402a01437e0ab7bcc3683777a31dedc5f00f180583e2f77aa078dad40fe5d565f8ebe2d4ae3e308d93bd1db4cddf0d3122adb1bc60", 0x98}, {&(0x7f0000007c00)="b4f9f0877c55e1f778018ebbce5094ba223c4bb722c667db75b7d7478353b2277eece6", 0x23}, {&(0x7f0000007c40)="7943e8029a7a64eec2878c9b15c1d45b5b4e59ec887024722fa073496a375db3645adca007cec2", 0x27}, {&(0x7f0000007c80)="ca9c5d48abb4bb450307959ec208cbea72e8330ecf643d2e8eb1346eaf346ec457c250238eb2920f21ae346d6c46263042ccf99b316104a170151e81758e21ee01b9e588701a019a91e0af0b3b4d003bddd27592a866761a2ba593c786dba4de6db4404c7a3b02b4183e73f89be031149838ec4ca8db88714f2d2e5e112c287354946ac5abf8abb16c941ad4bc339f48b53179e2d5662303940e73ace9fb3eebe371b7e5a8f43c42a1bd87dd071873f99395289800ec454db8fcf6a477", 0xbd}, {&(0x7f0000007d40)="04824eb3ba7a6790123656f9b8af7c56605e28bffaea77bf03cdc1311a78b004ccd49ceaf20daf964614d1e5169492467b39d95adbfe0aed9f9580be4383c6d2fb865cdaa929d8c1aa1b71759b965d21c1400b785fb41e3971d412901ca377010fd6d1d1ff81f38526c76f7ac28fda0980675642260b2deabf3d4a0c2ccfe4175538a1b0d7a07ada55c7846fc4f529ba370318f9055e", 0x96}, {&(0x7f0000007e00)="3339c45258f99596e87a1e8cecec0f39c0c2ca5846b799a5188bd9ee8c1516300de5713bd01337db86ab5bb3dbef8e16f849f994dea5d211bbec85aabe15b7d73666ef4fecef12baec05793ea87a5fdf449d2b3349fe1b3dd88e1fe7d319e0d0cffc9f33b4a5634217fc4e2998ef45285ff8f6eb0247b08c9d2682e5b024a7bb1479d4046f6b3fbe98d5cbdce7b067ce1cd2451412f2507da7a9abcfc872a8", 0x9f}, {&(0x7f0000007ec0)="7f234722250398eea639e92f2d9a5152e1c295a67accec0ed9308b2150c338d640c52f50805d0df72e3fc69094f0491c95e3cecaf5eef554ccf978c5dc88c041d369841666a596282b9d815986d748ad6e7f5c6f5760bf6ffe633cfa577b5d95468aa7b3f457944cc3aec0a3b19535d1fbcd1d426c7ecaf74a83ca1a7bc16e2e72fec60b0e5bf53b198c809b36c5657b51b861005504d521dcbcb87c60a43579be88b5cca68cf6445d9fac58a6988742a13c5027cde52f7faee0b4c2a605720c2406d7286bd07e24095bea87311f43c8977f65c83d9c2e64a52ab2093e7256be0a2214759c44f663", 0xe8}], 0x8, &(0x7f0000008040)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @mcast2]}}}], 0x90}}], 0x8, 0x4800) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a80), 0x80000) pwritev2(r2, &(0x7f0000007a40)=[{&(0x7f0000007940)="ab78ccfa1586a8c5ed9e441f52", 0xd}, {&(0x7f0000007980)="f6cb764f404331e8f101d9cf8b75b2376125b96b5a730f71a8219c79558ea585f97d3692d22729a43eb4b17003a9a4f049bb4e3af8d9d14b94fa36e5beb65f4d0b9bccc4fb66c83c646abe71cd835b5712957001b83e04b40367929da4c3478a178019402037bb5053e8c7e78658307b0e908f483ac7a2c53822f7b5710c76b0b953ad5eca89146dfc063f6e3aae50547525b9eddbe361a93aa43d", 0x9b}, {&(0x7f0000008480)="b77a5a8683c45e482287e2cc0c4cb749249c857a7840d74800ee36fd5a814449b452a9d9c81e54b034f88f4900e54f3f7436af0f4b519134dad8c99f8a20ce2b8e262aee5ad5094b6e38c88698c0fa57ed97cba44a8cc1dd482d97602e6825822c914d710861ea5ea23da9bb693a0d47971c946e9053d70184055175183f74229eded5e37f4042a3217ef00491f4d915fea4e836778e0e2fbd6f2fe568a6c798f5689e095e00d02dabcd18b23da36388ada9d1d6b5488669953a3b2b75ccccc2bf75e49331a7c61eba566c6567", 0xcd}], 0x3, 0x0, 0x7eb1, 0xc) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:12 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000005ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xfcffffff00000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:12 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r4, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x4, 0xff000000, {{0x1e, 0x4, 0x0, 0x4, 0x78, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @local, {[@generic={0xb, 0xd, "367ca430ad6ed3593af00f"}, @timestamp_prespec={0x44, 0x54, 0xd3, 0x3, 0x9, [{@empty, 0x5}, {@local, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffeff}, {@rand_addr=0x64010101, 0x84d}, {@remote, 0x81}, {@loopback, 0x7ff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x4}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x80000001}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, 0x0, 0x200, 0x70bd28, 0x2, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x15}, 0x1) [ 1572.492747][T30294] loop3: detected capacity change from 0 to 1 [ 1572.506136][T30298] serio: Serial port pts0 [ 1572.525444][T30305] loop4: detected capacity change from 0 to 1 10:50:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x300, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x10000) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, r1, 0x1ad27000) 10:50:12 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x6, 0x5, &(0x7f00000002c0)=""/15, 0xf, 0x11, 0x1, {0x0, r6}}, 0xffff0000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1572.539807][T30294] loop3: p2 < > p3 p4 < p5 > [ 1572.553283][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1572.561315][T30294] loop3: p2 size 2 extends beyond EOD, truncated [ 1572.563006][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1572.573514][T30294] loop3: p3 start 225 is beyond EOD, truncated [ 1572.580721][T30294] loop3: p4 size 2 extends beyond EOD, truncated [ 1572.582328][T30317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=30317 comm=syz-executor.2 [ 1572.595824][T30294] loop3: p5 start 225 is beyond EOD, truncated [ 1572.600933][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1572.613064][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1572.622153][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:12 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_link', 0x402, 0x1) read$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="fc00000048000722ab092504090007000aab2000130000000008e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fa0780196370d115103d633d450002000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ad20d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e98839fe326f082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567a8835d731d05b097331ffa09b62de842276d0098f07da2", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x6, 0x4e20, 0x4, 0x2, 0x20, 0x80, 0x84, 0x0, 0xee00}, {0x4, 0x2, 0x1, 0x4, 0x80, 0x6, 0x9, 0x4}, {0x8000000000, 0x8, 0x3ff, 0x4}, 0x8e}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in=@local, 0x3504, 0x0, 0x3, 0x8c, 0xcfe, 0x1, 0x400000}}, 0xe8) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="acafebf9ca942772c9f75d94db1d149a7c132b73fa8ef27aba9e1934e4b106fba6974e836f8e8c512634dfbe9567c732ebece7815b362037d2ea3e14d18162d23e4c6d0e277d490a0a036a1be8f3ba042c", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf25160000000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000000000a0006000802110000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24008080) [ 1572.636403][T30324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=30324 comm=syz-executor.2 [ 1572.671011][T30305] loop4: detected capacity change from 0 to 1 [ 1572.677377][T30294] loop3: detected capacity change from 0 to 1 10:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffff00000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000900000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1572.707842][T30294] loop3: p2 < > p3 p4 < p5 > [ 1572.713431][T30294] loop3: p2 size 2 extends beyond EOD, truncated [ 1572.738559][T30294] loop3: p3 start 225 is beyond EOD, truncated [ 1572.744784][T30294] loop3: p4 size 2 extends beyond EOD, truncated 10:50:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c) 10:50:12 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000006ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:12 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = memfd_create(&(0x7f0000000100)=']#}\x00', 0x2) r4 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x10000000) r5 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x6, 0x40, 0xffffffffffffffd4, 0x3, 0xc, 0x0, {0x2}}, 0xffffffe9) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x7de0, 0x0, 0x80000001, 0x1, 0x1}, 0x100) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x418}, 0x1}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) inotify_add_watch(r8, &(0x7f0000000200)='./file0\x00', 0x20000810) syz_io_uring_submit(r6, r2, &(0x7f0000000300)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x3ff) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket(0x10, 0x802, 0x0) sendto$inet(r1, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r1, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xc9d5}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_io_uring_complete(0x0) sendto$inet6(r3, &(0x7f0000000380)="3443e11ef5698c638be39a94ccfb70b6c51a71e2fbac2501937c9732a269417352088228f98fad928e654c3c16173dbcb77e89cb9d5a402e042dd676eb96c89b1aa471008a1815c62dae6169f7a91caec11f39b325329cde7e7bd3c1daa41832a27b240727658aeccd3166b4d2d49853194d8606becbe200701248005f895d13634dd45c86a91c795db35ce393b79b2db010ae5caace167fa8819fc0ecd80034850bf6b952c74f50d6f326d45fa1aa1de5abb325e2842463fab31c6920549e9a416ecd6fca521aca7d5005adbf701e85f2d18e378e76979b90a04874", 0xdc, 0x40844, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r2, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) sendto$inet(r2, &(0x7f0000000040)="b95327d1710ff4a1a16c092cb3a96066e14eec208d514fbb6cec00c6ea46de9a764a1ba0ca17e4d96ad893c4a98ce38f1a17e6096e3d2748095857e95420bdfa5b76a48a9106c2a761a645059dd35e10e0f589f003f90fa8324ee5bf526d01368c2309f7c48e231ee0d0e441ed7483bee89991ce64a70fa550c4c7ff2e", 0x7d, 0x4000, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) 10:50:13 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) open$dir(&(0x7f0000000400)='./file0/bus\x00', 0x240000, 0x2a) r2 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40f40, 0x0) r3 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/0'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='squashfs\x00', 0x80, &(0x7f00000003c0)='&!#-)\'\\-#\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(r3, &(0x7f0000000180)={[0x7fffffff]}, 0x8, 0x80800) getsockopt$inet_int(r6, 0x0, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x420500, 0x8) [ 1572.759447][T30294] loop3: p5 start 225 is beyond EOD, truncated [ 1572.773130][T30352] serio: Serial port pts0 [ 1572.783755][T30357] loop4: detected capacity change from 0 to 1 10:50:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r4, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendmsg$sock(r4, &(0x7f00000005c0)={&(0x7f00000000c0)=@rc={0x1f, @none, 0xff}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="9f77f1963dd666b9c67bd560ab0c727e98f2921a3d5e12cc6440485855f4399ae21f949a3ec39f1759bc87c2a0e32ec52810699d77fb6339b93ca075c26d83ee7d4bf5bcb48aa9a562640bd6d6a82c44a8b4bd94a1185b0ad9f962c5f7923f13035e151d0bd4c0e0b4951b7a7a40475892a20639b522a1b6d85e5f76521590c40abae38469726eae04577ae0fafd0bed4daba5e5c340fa51d6472609bc558d52b0ad155777937b8d1edbed05", 0xac}, {&(0x7f00000002c0)="dbe10167cab5448c10a07a7d52213e72be04d4568b0aff3164b35d1540d66c4feaec9ebcb806f7dfc33b377d1cc4f3cf39c2a33ffa9fd5244b681602c2230a937b6d9da25727a4198ee72f65fdc6a97e", 0x50}, {&(0x7f0000000340)="477def7a4e0a5d832bbd68957d2eaaef75894c6b6767f5d5d621f7f3f5ecb9d83432fdead97fe2d09bd77c5af765c3d3f9bd0d2993ca0cfb5eb840dd9d9ff4cab2cc76dfd1d2fb2bc61187e448fc872ebb610aa3ec639f5d93b077a39374f26a113cf3b62a8d8d829db489f73ef9f55eb3403c49c8449e0f65e48cdc4e9c9972cb36de459a9be944e4db617dcb863480efb34f47d409dfec02d358e778ef71a8c3c0f54bb8b33bbb920d222f6ca3ec0a6906ebc2d4b487703518351e3714485a45bd23aec018aba5d0d359fe392a941bcddadc1b915995", 0xd7}, {&(0x7f0000000440)="20dfbdb3c5de219ce89aefdbd8d49f60ec6c2c19fe67f4355ed2bf60276f2e6e7935d577e2b4fc04b9831ff9aa2b6557e29eb80a3fe8f2e2558a5dc1461bcef3f45b1c4b40786b6457d7ee3ee1d9ca22c7833f1ffa20656313fa40f913d6312e1a76b88702f00c713c718e13", 0x6c}], 0x4, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3e40}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x90}, 0x24004080) 10:50:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:13 executing program 0: r0 = syz_io_uring_setup(0x1edf, &(0x7f0000000240)={0x0, 0x3a95, 0x0, 0x3, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) r6 = socket(0x10, 0x802, 0x0) sendto$inet(r6, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r6, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r6, 0x0, &(0x7f0000000180)="0ecb26805a4fc161536758f7f11fa54231ccaff5b5e633d0c8429285dff3ae322e0bdb6179ded93f2527b597f31e4da1d2451d8660c3a8c0a9acf6b76e955fdfaa4f7ded669c5c80eb5d60a0adfec223c28778b52f7c038cc19e9a28e1645880a61e115e4e6c05", 0x67, 0x14, 0x0, {0x0, r10}}, 0x504) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1572.882198][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1572.883420][T30357] loop4: detected capacity change from 0 to 1 [ 1572.887013][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1572.910796][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1572.917020][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1572.924435][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x24a902) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3b}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x41d, 0x74f, 0x9, 0x7fffffff, 0x11, "1e98339843be5a2d34db1c703dadbb817a3409"}) tkill(r3, 0x1000000000013) 10:50:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000100024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1572.981747][T30382] loop3: detected capacity change from 0 to 1 10:50:13 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x27) r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(0xffffffffffffffff, 0x36d1, 0x6d1e, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x5, 0x3, 0x0, 0x20, 0x0, 0x1}, 0xfff) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x7) io_uring_enter(r0, 0x2ff, 0x0, 0x1, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) [ 1573.024888][T30405] loop4: detected capacity change from 0 to 1 [ 1573.043848][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1573.049165][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.056040][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1573.062274][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:50:13 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000005ac0), &(0x7f0000004540)='./file1\x00', 0x100, 0x6000, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r4, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) sendmmsg(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="d21c205ea5b10775a9e92daac9b429d45d7cd9b8449677da44a1675e621269431a5424a016f498cab738feb8006dc59b2073847b58882468e94bd2391e1b3e8e98ac25ddb63dbcef95132db9151501abe02409df338927b1eb0d53709b57b243ac2baa947042167b5b76474593a673a5817dced1c2e7bfdee888a1abee0b6b9e06b7f188eb84766e288dc4281a847fb8868dbc5e85f5efb3e116ea3b2252a11a9bf19543b7cc24664d0bd7d75e7fe561188943dddf37a18c86d7bb8c31fa5507ef4ae0a0c3dfb56d485fa165494303bd908faff696fb27686a3712b07046", 0xde}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000000)="b5943315b79c0a50cfc69c8988e410a680eb328443ab75a0da75", 0x1a}, {&(0x7f00000000c0)="48cb801c234b689ea919a25dd76f2ba2e21f4680", 0x14}, {&(0x7f0000000180)="27b8af6c8e6fe3a78f935132c7e4ff2dcefa9a9d9915591e4a28c4dddb75d5f1aaf07b9c655a52489296a37c736b4e1ceb0aabb2e9cd8dc2b2a62e1d0020ef1683d6cf232243738df4efbd98daec0c9ab97c889d19655b1c2316cc7f93fad83269dc6eb6f82b48a9e85818070859da20898efc687fa35032e300e3123406b939a4a290a21f5ade020a3832e95c919ebc451cba1832678222a578ad9810b693e499dd93301d33a1749c001d1df466f469fdbe8e5adb5582ff872429", 0xbb}], 0x5}}, {{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000014c0)="33f6a9443a1fdce8b3f382d5125fabec4c218671aaab194c5f03d9ae19a99ee588d93a48c072f2ca63523984d039a8a4eeeffe5dd440307a30b8eaaee180d6af9d6a52ba7a8c143d640f3d2f097b43e2e26c4056481eee2034b2483c0ce048c26249d9a0df5356a6750e7f8ee97bd509c1c244539507a8e10eec9561f062ccfdf0bf63cb2df77d21cb4de791fc37b9803731fd388abc2b77e6", 0x99}, {&(0x7f0000001580)="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", 0xfe}, {&(0x7f0000001680)="06e26c6905bfc0eb31ea49770672a88199bbc6c31fdbbc1cd9ebe32ed3f4baf5dee4a9cdf2f8a5b2ccb546f5f5e32ab43e074e0ce9561257a1e1c3265311bc0a508d4d9cbc31d2252be77b02dd21ccbe5af0a15c85f038addeed0b939133c54a5336bc92a2ac2f2be53f53ad0abb804b9375e7ca5192ade316c2272b49", 0x7d}, {&(0x7f0000001700)="e1731ebad2b6f1d694267f408268d17e9730207b248e8f573d8d0f005463097c1b1585e3e20dd402ccce16a59888dc49d13707148919be9de073991341b1a7ef1126296e3356efc4abac0a88dc5d6d047aa0e006c52b871713779e387a3728ae02aa188e8b19edf3223c08dba6dddde605880562a235f0a3ce38fc3ea731a407e2907ad3b6058d387201ff09d266a57ec0e8c5d9aa5c08dfd9521efbc0437e89c95c1d109cbfba10728060f1ad62de36cae7a66c12458eac5aadc3338b57d38c803cf80e6fb5830ad5c3ad100de40df3c4", 0xd1}, {&(0x7f0000001800)="99f5bc8e51a2cdff94dce4b861fbcc098caddb67f831d4f3b3cc95215607c3591b326218f3483a5ea5551d1ae2a633f434c0db779f33bc5ec7c98d2fb6fe8cff5b15e1f53f63fde7d49b20307dd55b32b2c8344a78748da408599986207c51afef697a65bd69233e41493dbe007e55f94dd02f63a71656704815d48db2f0a3", 0x7f}, {&(0x7f0000001880)="c6ec28560c882b6882a91717a7fe819f20d3d62699b9a2e6ecfd3a15b194b0f858eac02fbd0061f51a4a2afdfcb9ee2a1ba9f4a533172a162231fd59198d885bd4508f075b876378355813a6287fb61655321d0ff2a70bc4a643197eadef3d1def2db5fbedbafe5abfc24d3d8b7d8976e34c78e06946f51363b36ae9a043201b1347", 0x82}], 0x6, &(0x7f00000019c0)=[{0xf0, 0x10d, 0x7ff, "ee799b1ad4713c5d7d7327bfece448c9b553dc5fa8e86ec2740500d4b651c0e42ece393e2f41cf0a5b2230b21c4b46187c5863590f6f83d4ddbd039b49312d3b0ddcbb66db08a05a7b201e31e123eb75133884081ed8cea4edbddc0ff45c1f9560a410172df9c294d034e749a78cfbb44526ce429f3ce6e6b601d1ab761453585a12a8978ff1fce619da3893cc8d10f65e61e627ee1cac630713c0f894a285fa25b9d7d455883e3eeb82321186d3adc7fb1d8db974c9d205345726c84de4781f7ffd9a9038e4d17caff9f3adedaa3d2e68aabb486dde3373a8ed320c39092b10"}, {0xb0, 0x100, 0x0, "2db37919b285741f1178991b4544e5bd5649ae538548a4d82b4a519022fc9b0ae5264639ba409897da17f0c527da91375cab9f593b35b4cd0d0ac6a58c5cab6ce6fbdf6d3fdb916dca87155c8b981a3f22d1ce50ed3f067367f47d7698ae8282353eedbc8cafaabafab7ed59bb77ed27be8efe526e450d77bceb6eeffbf480352a26be3888a8de6ebc8316dc777668dc7d6867725378e22c0969ca159db58d"}, {0x28, 0x107, 0xff, "2d64ef366a4594c25b6fd3ee8a3048b63283"}, {0x28, 0x88, 0xfffffff8, "169ec5fd3e6ad82b5f5702106f1273fe02899d60b8"}, {0x20, 0x84, 0x7, "22bba0667b93c7a1f22e"}, {0xc0, 0x113, 0x100, "be9fc6bd316216d04127bd3889b2266bc2470c8d57ce220e58b88c49279bca189f5d7245b11effe28da42b3ca380a9a3c8241bc0fb7c7957c93240a29fbe33dfa6888175799bcd0e36226ecc68c988f3cae729f55ddf2ce51f45d862ddeac9c675385e5f3de415f5bd98e91f7855914dc9e94dc18f1edb3628c97e2c36146bcde236d90c0757b3a64aa4b5602bade2f4fbc93687ea0aed06c2e60eb08c8e72ffa8298427c480e4cbb6d2f29c8c"}, {0xa8, 0x10f, 0x1, "0c858d4d8221178d300ad593f4dc0c62feeca4f0609358cc08937d8fc8a6090fd833963225b37fb85b0b48373d55133be870536189d072987c280577f06e9914b8878056cc5b6d7f3f842972ebb7329297b7d3436eb63368432c87cfa7167c4576c79ea89ed4cedf3a1ec9409b112c551c2dcf223f67aa56bed09dfc7d1ddc0f0d2030a3967512c5fe2ae42313119f1ed512662111b3c18a"}], 0x378}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)="b607a8a98dd3456914dc6f7692", 0xd}], 0x1, &(0x7f0000001dc0)=[{0xa0, 0x116, 0x81, "6a5e9995c3347108778ee9d3ce7407c9d81bcebfa4961cfc3c455e1a9285ac6092e85a18b2bf26d13a3ea068b03266584ac9972fb195c5e81a0a19e74b56f6146e23d12a39e61a03d65755238516eff053b2cf0f1ea2856540043aaadfa58b83791aa06c98f8d0eee8987196bd7e8b401c256e36638d26b4aa0d9a0230e71fce5fc1196a5e7d06fe0d08ee5ad6fe8dc4"}, {0x48, 0x108, 0x400, "a002429bf4fc6076e87a49ca3a57a8de9f31852ee416abbd2c1b0b74060880c93426e24b8ddcb39a13b6f27ce5f41ec3917a01221874"}], 0xe8}}, {{&(0x7f0000001ec0)=@in={0x2, 0x4e23, @private=0xa010100}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f40)="d771f3ecb75bef5e89463fbace15501a52f76bab9284ea69e6887eecc611cf6a1d783fc60c73f703c5d167b41bab40b30494caf08120a14e0e6143544fdbe2cde0900c20796fc90ac9e41b89afc40426ca5e0d12933e6a0e70928e7f8eae8f437846893a0c0a2bbbbb4ab23cac519f40a3e41434cb267b7b4e3b55b6f132233b13b6e6fd3e29c4bf56ccc4a5b3e2e362a71da8897846de0c7de7f01b98b352361e29f568049a16930c07ebbbafd1ae58c65c0ac490e915e77219e649b4326e90", 0xc0}, {&(0x7f0000002000)="0d172fe8d86dd8e667edba9bea00aaa7c402bdacbdb5cc054ea1a62cbb00828f312a82cb31c7d6fc2746dd6fc5905b0da3069a08e29fb49104f6df8053b108e424b9811a2b9a1b93aabd4a2edbf440b42074860306dbcfbc065877b324e932328a75d220fb963ba4abbce85037157436106409f115e0d4df87e4be42b6c5c992f4d5a534b3ee2d3755bb71ec968f6a3197ceb03bd7c1d08cc516820a6e3aa7ce84a44498a865c18d87af9b5ac2d1205419a56aa4c17ff0bbbab43b3a730e17ebde0de7f53b20e45851f336913ece986347", 0xd1}], 0x2, &(0x7f0000002140)=[{0x28, 0x115, 0x7, "da8400d341de0ebd12acd835a3cd3982741f"}, {0x1010, 0x103, 0x3ff, "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"}, {0xd0, 0x105, 0x0, "48e65db99d3e6a18738be79efb1290cd427fde0c02cbf2b0525572ab3d77a38e6c5d8ec12ebeb1303b649d8559ff9e1238a418a365ad2bf15044f8b1226fbbbcc3c024a8f51c9a2217ca2c3bbcdb2de02791c41992190f5fbf774b8d973333529143dc4c6d06ac036cd88a27ff50ecbf8d21d5f92a4892a6e944b28ba9ab506acb803f9ed676e7a908976bab270420df068036a4723b28766d62a4521d1f544e993fa815e8ed425c4b84b5f98bc7d32a126ec3aa9fa7b5e1744064360614b8"}, {0xe8, 0x115, 0xddd, "921b189ef8ca91493758e3597d1fa515bc3637b2f39fe91ec7598e873a6d4e4653e6f5ed647417cb6ac28ef728ee3052c1282996bd5ea2623d19205a91a5b0ece553e547f3d394c19035beee2ffd1bf6afad858929133459d96fbb3eb3304d85c4b1b9f68d678e9ac81ac942fa3ed83e719d5e507398d02a3d23540261aacdc6018213006111f201d20d65fb119a8610fe7d078ceb9b1bd52b785a13608d7ce3cfd645ce53dd2724aa2e8e72072f750bc72f44ac11f1fbb57710e028a287871b01841dbc7456e35b6767f20ab739dc4e11e8abf999"}, {0x98, 0x10a, 0xffff, "daf546c153bb1a979249280d92b65f06bb2515afea838b43163ac4c39c4d240fae4b81462196505f0cecad386b1d97a86725160867af61faab713bb4e4597d8a1f9cbe5da82b645e2c4a42587a1e6e87b451384d561882205599a34e2ca5c10be08ff8593ca4bf49984647878c399fd074ec8aba00b4e32242c8f51e150ab111adbb8a7d"}, {0x1010, 0x105, 0x1, "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"}, {0xc0, 0x101, 0x8, "5314976cc989f501e7c4794806967ee08553f157444d14014e31b4c1556056615a295870dce690ba6e6d78ceb764579db926e93e9b9cbb333a78cd0243fdf473b39ae7b02e5be614834ad60a3e2d3d298c9ad1f23e551e6dd2fd0dd190f470aa56365fc15e9308925f51c6a235d30bd697b65474ed43339d48e0fc6613093fd89f79b52151db8e0497da8168d97f54f484c1bd0da01c3d31c027bf7a26c7327c67f7111565f916299276"}], 0x2358}}, {{&(0x7f00000044c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80, &(0x7f0000004540), 0x0, &(0x7f0000004580)=[{0x58, 0x1, 0x2b, "ee8b4fbdd47a6f7ca49e452f0bb1cc20cee5e5f6389371bbca26855042d7fa33b2976cc43220097324c2dbf7c96bfbfdd8c6d7f8bc0a16ef1b0fd43677ed784d47bac67af2236ffa"}, {0xc8, 0x116, 0xffff8001, "8730e660433676ba1f534ef45fa7fd232c71f21c4881c5cf96e691487926d2040fc9a0049d66bab18e0af358d35a813e2496ddd3839f7756a800008b1fea28346e5bff93b4fcc007c629aaf01ee47279d76828b607ce0215dfc725620e761ea5507f7b628724225d76171eb854bdc1e221b54b6ca178f214d152316dc591203d824425b2595ffbc5af22399f20fb63aa9b07d477c3c5f26f3a2fb5fef0909f3bab6e4567a901b128243f4a4ebea502f0fd"}, {0xa0, 0x11, 0x9, "2f5780c1256061505cb0d77da05d28f5f96f8220cb9181082319018fc10235c66a7321a558e6da1c8e638cb28cf768d6bfdb32d5a51c02a149392aae9e3321e0056c2ffe187bcf17bb8d8b86a6b6e3eda563b32cc62238f433f668e5e22c381fbd2efb24b64506d7fde1017179fa3dec46dd2743b7afbd4dfc4bc2fd03d529b4466d6bc64bc81998c598fde77dec"}, {0x1010, 0x29, 0x20, "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"}, {0x110, 0x101, 0x4, "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"}, {0x110, 0x3a, 0x10001, "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"}], 0x13f0}}], 0x5, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1573.070332][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1573.078983][T30382] loop3: p2 < > p3 p4 < p5 > [ 1573.084043][T30382] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.098972][T30382] loop3: p3 start 225 is beyond EOD, truncated [ 1573.105423][T30382] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.113037][T30382] loop3: p5 start 225 is beyond EOD, truncated [ 1573.118793][T30405] loop4: detected capacity change from 0 to 1 [ 1573.160341][T30382] loop3: detected capacity change from 0 to 1 [ 1573.208044][T30382] loop3: p2 < > p3 p4 < p5 > [ 1573.213026][T30382] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.221347][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1573.221796][T30382] loop3: p3 start 225 is beyond EOD, truncated [ 1573.226502][ T1038] loop2: p2 size 2 extends beyond EOD, [ 1573.232350][T30382] loop3: p4 size 2 extends beyond EOD, [ 1573.232361][ T1038] truncated [ 1573.246776][T30382] truncated 10:50:13 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000406ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xea, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1573.251351][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1573.252117][T30382] loop3: p5 start 225 is beyond EOD, truncated [ 1573.260205][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1573.273777][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1573.361777][T30451] loop3: detected capacity change from 0 to 1 [ 1573.410048][T30451] loop3: p2 < > p3 p4 < p5 > [ 1573.417749][T30451] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.424893][T30451] loop3: p3 start 225 is beyond EOD, truncated [ 1573.431173][T30451] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.439286][T30451] loop3: p5 start 225 is beyond EOD, truncated [ 1573.450411][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1573.455668][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.463860][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1573.470117][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.477628][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1573.518209][T30451] loop3: detected capacity change from 0 to 1 [ 1573.577724][T30451] loop3: p2 < > p3 p4 < p5 > [ 1573.582667][T30451] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.590160][T30451] loop3: p3 start 225 is beyond EOD, truncated [ 1573.596567][T30451] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.603924][T30451] loop3: p5 start 225 is beyond EOD, truncated [ 1573.708591][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1573.713753][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1573.721182][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1573.727565][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.734403][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="0e8e453f750235237f4c131bb384cae4179efe424e7016dd0e1224a26ad0082cdb367c04000000000000c8ac475daacf85d9259092388b7b2c", 0x39, 0x4004051, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="3ca34c3fc6a3e70ddb0ae4b00c06326c65ba5542c3fc23565b56c5bbbd53dd69d4742953ad79fb3112b912864d202e0e37cec361946a5640e1f0e9fddaba70903d60a818c650c85f3b3669cc3b67ca5320247f1fbb605bae50677be0fece9f5ff98470bb565a3549f570f664c1e223549709ac8019041835436f12dd", 0x7c, 0x0, 0x0, 0x0) 10:50:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000200024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xeb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:13 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000007ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x1000, 0x0, {0x3, 0x0, 0x3, 0x1, 0x1c0000}, 0x22}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x7, 0x5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1573.818517][T30493] loop4: detected capacity change from 0 to 1 [ 1573.818953][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1573.829714][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1573.833984][T30492] loop3: detected capacity change from 0 to 1 [ 1573.837426][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1573.848836][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1573.855777][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1573.874177][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1573.879354][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1573.886406][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1573.891731][T30493] loop4: detected capacity change from 0 to 1 [ 1573.892698][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1573.905698][T30492] loop3: p2 < > p3 p4 < p5 > [ 1573.909153][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1573.914427][T30492] loop3: p2 size 2 extends beyond EOD, truncated 10:50:14 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1573.927273][T30492] loop3: p3 start 225 is beyond EOD, truncated [ 1573.933845][T30492] loop3: p4 size 2 extends beyond EOD, truncated [ 1573.947778][T30492] loop3: p5 start 225 is beyond EOD, truncated [ 1573.958915][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1573.963781][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1573.975997][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1573.982437][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1574.003050][T30492] loop3: detected capacity change from 0 to 1 [ 1574.005987][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1574.040275][T30492] loop3: p2 < > p3 p4 < p5 > [ 1574.045815][T30492] loop3: p2 size 2 extends beyond EOD, truncated [ 1574.053675][T30492] loop3: p3 start 225 is beyond EOD, truncated [ 1574.059966][T30492] loop3: p4 size 2 extends beyond EOD, truncated [ 1574.067397][T30492] loop3: p5 start 225 is beyond EOD, truncated [ 1574.075396][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1574.081049][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1574.091461][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1574.097924][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1574.106239][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1574.121283][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1574.126284][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1574.133287][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1574.139518][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1574.146271][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x57}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setrlimit(0xb, &(0x7f0000000140)={0x9, 0x5}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000013) 10:50:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xec, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/62, 0x3e, 0x40, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c98}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7ff, 0x2, 0xfa, 0x4, 0x1f, 0x7ff}, 0x20) 10:50:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000040200024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:16 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000009ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:16 executing program 0: r0 = syz_io_uring_setup(0x4977, &(0x7f0000000240)={0x0, 0x0, 0xa4ca6d83d0e1d3a4, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x200c}, 0x1, {0x0, r3}}, 0x3ff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = syz_io_uring_complete(0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x80004) [ 1576.017590][T30559] loop3: detected capacity change from 0 to 1 [ 1576.024314][T30562] loop4: detected capacity change from 0 to 1 [ 1576.031273][T30564] serio: Serial port pts0 10:50:16 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x754}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4095}, 0x20000080) r1 = socket$inet6(0xa, 0x2, 0xffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x9}, 0x1c) [ 1576.060365][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1576.065390][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1576.082572][T30559] loop3: p2 < > p3 p4 < p5 > [ 1576.084807][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1576.090429][T30559] loop3: p2 size 2 extends beyond EOD, [ 1576.093614][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:16 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd_index=0x1, 0x2, 0x4d, 0x1, 0x4, 0x1, {0x1}}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xed, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1576.094563][ T1038] loop2: p5 start 225 is beyond EOD, [ 1576.099238][T30559] truncated [ 1576.103499][T30559] loop3: p3 start 225 is beyond EOD, [ 1576.105698][ T1038] truncated [ 1576.124022][T30559] truncated [ 1576.127153][T30559] loop3: p4 size 2 extends beyond EOD, truncated [ 1576.145653][T30559] loop3: p5 start 225 is beyond EOD, truncated [ 1576.154796][T30562] loop4: detected capacity change from 0 to 1 10:50:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/99}], 0x1000000000000049, 0x2, 0x8) 10:50:16 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x21002) syz_io_uring_setup(0x7b8a, &(0x7f0000000180)={0x0, 0x1c2, 0x1, 0x0, 0x29e, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) [ 1576.172076][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1576.179452][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1576.191884][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1576.198676][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1576.202036][T30559] loop3: detected capacity change from 0 to 1 [ 1576.212029][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1576.250609][T30559] loop3: p2 < > p3 p4 < p5 > [ 1576.256088][T30559] loop3: p2 size 2 extends beyond EOD, truncated [ 1576.269661][T30559] loop3: p3 start 225 is beyond EOD, truncated [ 1576.275884][T30559] loop3: p4 size 2 extends beyond EOD, truncated [ 1576.283950][T30559] loop3: p5 start 225 is beyond EOD, truncated [ 1576.335840][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1576.340861][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1576.349082][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1576.355393][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1576.363485][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x50, 0x0, 0x6, 0x9, 0x800, 0x8, 0x8000, 0x2}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1b) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x69, 0x8001, 0xfff, 0x5, 0x6, 0x5, 0xd6c, 0xffffc277}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000100)) close(r2) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:50:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xee, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000300024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:17 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r0, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001100)={{r0}, r1, 0x0, @inherit={0x68, &(0x7f00000001c0)={0x1, 0x4, 0x8, 0x8, {0x2d, 0x40, 0x37, 0x3, 0x40}, [0x80000001, 0x61, 0xf, 0x3f]}}, @name="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"}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/63, 0x3f}) 10:50:17 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000aff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:17 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0xf000)=nil, 0xf000, 0x8, 0x10010, 0xffffffffffffffff, 0x10000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x100}, 0x1, {0x0, r4}}, 0xed) r5 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1c8a, &(0x7f00000002c0)={0x0, 0xa9ce, 0x4, 0x3, 0x1ea}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x0) r10 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r8, r0, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r5, 0x1fd, 0x0, 0x20, 0x0, 0x1, {0x0, r13}}, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x3, 0x0, "a656b52f261b6e22110fd20a719a20c04888dc5c6269e8ab877361a8d37853af615d7ebe2a842e524b1b905b8068cc49aa34b084bd5e9ca885a29049f092d8", 0x25}, 0x0, 0x0, 0x1}, 0x100) 10:50:17 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = socket$inet6(0xa, 0x800, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x10100}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1576.886379][T30645] loop4: detected capacity change from 0 to 1 [ 1576.908836][T30652] loop3: detected capacity change from 0 to 1 [ 1576.912474][T30654] serio: Serial port pts0 10:50:17 executing program 0: r0 = semget$private(0x0, 0x0, 0x100) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000002c0)=""/114) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r4, 0x4be, 0x5aa1, 0x2, &(0x7f00000000c0)={[0x3]}, 0x8) r5 = semget(0x0, 0x4, 0x81) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000180)=""/46) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xef, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000400024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1576.954273][T30652] loop3: p2 < > p3 p4 < p5 > [ 1576.959691][T30652] loop3: p2 size 2 extends beyond EOD, truncated [ 1576.967982][T30652] loop3: p3 start 225 is beyond EOD, truncated [ 1576.974186][T30652] loop3: p4 size 2 extends beyond EOD, truncated [ 1576.986483][T30652] loop3: p5 start 225 is beyond EOD, truncated [ 1577.042241][T30652] loop3: detected capacity change from 0 to 1 [ 1577.064445][T30688] loop4: detected capacity change from 0 to 1 [ 1577.084161][T30652] loop3: p2 < > p3 p4 < p5 > 10:50:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x14) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x3d, 0x2, @thr={&(0x7f00000002c0)="ff775269a96e32e345c2139a0ff3711f793aa71ff003d99e2adbc2215485a60a9aa4a647d9c7818020541e1abc49c5a256e541833ae017b6a26c69667dfed42f72dedec65e29cc62181c8bbe1ae92b8680c1a3bf00f5aa8ed5873ec8e38a64dd63e011e48aaf8bee33a7258bc2b751fb1b09853e034bb3610b18064dce20c0d80e411b8d73d2d5828e7bdb7c92ffd3e3c0ad3cd46a5eafb85eff24fc938f4936246d2d4b4592dd943449415cd2b5ae8f8448a5a55665a13845b8fadbaef36d33c92b7aae7f", &(0x7f0000000180)="bec4cac0d7487ec912422560aff5dbfe9d8795b52483d45801d0cf6f398cf9b152282a8a27e36420923b904a3a3f71eea5d8f3d3ddc0e9ea766cfbcd293ad0c21fd53fc74db84f8824fdb29fbee24b0e149c61dc60a9f0c6c06d664590d43f5e80681376"}}, &(0x7f0000000400)) 10:50:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:17 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000bff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1577.089263][T30652] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.097981][T30652] loop3: p3 start 225 is beyond EOD, truncated [ 1577.104303][T30652] loop3: p4 size 2 extends beyond EOD, truncated [ 1577.113487][T30652] loop3: p5 start 225 is beyond EOD, truncated [ 1577.129809][T30700] serio: Serial port pts0 10:50:17 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x10001) 10:50:17 executing program 0: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000002c0)) r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1577.151338][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1577.156342][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.165533][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1577.171767][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1577.180358][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1577.193038][T30688] loop4: detected capacity change from 0 to 1 [ 1577.251081][T30716] loop3: detected capacity change from 0 to 1 [ 1577.320212][T30716] loop3: p2 < > p3 p4 < p5 > [ 1577.325012][T30716] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.333707][T30716] loop3: p3 start 225 is beyond EOD, truncated [ 1577.340041][T30716] loop3: p4 size 2 extends beyond EOD, truncated [ 1577.350842][T30716] loop3: p5 start 225 is beyond EOD, truncated [ 1577.373071][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1577.378043][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.384848][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1577.391277][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1577.398697][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:17 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x103) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000500024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) 10:50:18 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:18 executing program 2: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x802, 0x0) sendto$inet(r0, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r0, &(0x7f0000000280)="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", 0xfc) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x26, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x20000007}], 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000d00)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000dc0), 0x4) recvmmsg(r0, &(0x7f0000000cc0), 0x0, 0x40000020, &(0x7f0000000d40)={0x0, 0x989680}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="827ebb6d63f74c96850c5e8584f40235bd9f4387a42de948d474fb0458c6e613ef4f24e94e31feb85f4e6490cdb3f0ff4ff20ed6ce2ddfc1c3bc8852f1b7667275bd455dc89e89807eaebbb2854cf5e91d1362294fd62cc3ef8680e66e2bc9e1dd755ace03f3221ec4c5a311aef716c61699423f8340f836db2f8a4faf0418b2e0f651fabdb8df185889474f96abfc182f1b8ec87815320d6ebe7dd67c85021c90e5312b931b11439f23742875f14b42fa6933ace89fa16dfef76e1981e56f", 0xbf}, {&(0x7f0000000100)="86a000a3cdb24c2e136bd0f7b8e8b59d269caaaf2e94a6bfbce5127405be2ac81d6dbf19aaa8e69ec972b13e0ea5ea557929bcab82cd770acbee4b351334ca32f4105b8fb3c3ae5319393006711b81bcbb31793c41bd19ea49c3a5f04e58539a21f18fb57a4fc57c31734cb5e5bed584b8876313348c1b619ca010341d5d71993f58ca807cd63f9bd4fe01ad7b075de9ec87148864c39f760851576ebdc2d517f495e3c45cf41b93aa7ac81da0765233f28c8f03", 0xb4}, {&(0x7f00000007c0)="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", 0x109}, {&(0x7f00000001c0)="eb1e14c0c7e01332c22bae6edc", 0xd}, {&(0x7f0000000200)="dd67fe4fed3b58cc7805e77f56f4eebb5e1f5ea3ec98f65e3ca58b073ba7b97d9a2e73ee1700cb90ff2f8011c92757ce09530d2dc87652f4a5a82deb866e64fc21821f2529591b7830eeae0f571751922d5e69a5f3675e318b66283cd9585caf1b78c4576b21f98b030adfb5c0005a3dad", 0x71}, {&(0x7f0000000480)="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", 0xfd}], 0x6, &(0x7f0000003340)=ANY=[@ANYBLOB="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"], 0x98}, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x100647fc, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r1, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000d80), 0x4) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x1c) [ 1577.809034][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1577.814030][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1577.825011][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1577.831280][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1577.847435][T30763] loop4: detected capacity change from 0 to 1 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x2000, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1577.866541][T30767] loop3: detected capacity change from 0 to 1 [ 1577.873566][T30768] serio: Serial port pts0 [ 1577.886318][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1eda, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2, 0xffffffff, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x6) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:18 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1577.914651][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1577.921966][T30767] loop3: p2 < > p3 p4 < p5 > [ 1577.927249][T30767] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.934535][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1577.942670][T30763] loop4: detected capacity change from 0 to 1 [ 1577.942847][T30767] loop3: p3 start 225 is beyond EOD, truncated [ 1577.954998][T30767] loop3: p4 size 2 extends beyond EOD, truncated 10:50:18 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x2c, 0x18, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @generic={0x9, 0x67, "595de8a1d4c3b7862438840a3246a414dd3f721e441eced9b0683a38332baf879a5e82c7f78611abccb7c03bcc6f7fb5214376f8c578393d57dc59b6e763286436fad45b1bf469f185dc7d34ea9303f00a41589e1771d44e40c175f5f36c8c3e6637fcfed70ba7"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x6, [0x100000000, 0x9, 0x3, 0x800, 0x7fff, 0x8f]}}]}, 0xd0) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, 0x12, r1, 0x11bae000) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 10:50:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1577.964075][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1577.970347][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1577.978162][T30767] loop3: p5 start 225 is beyond EOD, truncated [ 1577.996607][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:18 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/119, 0x77}, {&(0x7f0000001500)=""/195, 0xc3}, {&(0x7f0000001600)=""/254, 0xfe}], 0x8, 0x3, 0x1) 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80000, 0x6) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r4, &(0x7f0000000280)="fc00000048000722ab092504090007000aab2000130000000008e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fa0780196370d115103d633d450002000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ad20d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e98839fe326f082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567a8835d731d05b097331ffa09b62de842276d0098f07da2", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001e00)="402394849f6f732095118c08d96b77cda7528118bdcc2a544892b812ecabc44676cb004474e80059f7c40035b7b7474077f648d9ea5bbbfefa53107b26b6a7891a1d8d276029685a598cb4a6c5ed93d5ca7148b0b4b166919fa82f6c07a6663c1e21cb1a00b4e2c878cbed7373edfb54e69ac725ed2625dc63290a40a655fc974c22f699fbbbb40c940dbfee7efacf211f9be9c23a9a71fb0d21d3208e9bf2af62c8db8f1946bced0dd1302b0aa4e5843b64b523dc33d878f12a27bd4a287764a52f9b6bc3", 0xc5, 0x40400d0, &(0x7f0000001f00)={0xa, 0x4e20, 0x4, @remote, 0x20}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001c80)={'ip6gre0\x00', &(0x7f0000001c00)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x8, 0xffffffff, 0x23, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x80, 0xc8f3, 0x6}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001cc0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0xffff, 0x4e24, 0x40, 0x2, 0x0, 0x0, 0xe, r5, r6}, {0xfffffffffffff800, 0x8001, 0x8, 0x8, 0x15c1000, 0xfffffffeffffffff, 0x8, 0x6}, {0x1b5c6c57, 0x6, 0x200, 0x80000000}, 0x9, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0x12a}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x1, 0x2, 0x8d, 0x3, 0x7, 0x7fff}}, 0xe8) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="32f811711550aadd640eb7646ae9578511ec844e50e851cf3afda68e4f5d00c15a089d4c66f61411fbc49c6c9eb9f6c0a536f62a7fa9bea56db6e88af0c015e335036132601a6dcbda30f09da8fdeb1e34e9e4f3f69a02a66e492a2b9e65c0647b4dc9a405622aac9a45d0bf4e49a80ec56917113151e178e5f4159d2141c8e55db09ec854ed71519ac733744b31fb8cc170e106773f690869ef164cebef2cc29f8d9d45e73e209f3453f14150cf449838f7c4d7fe01431bad45265ca4b3ac", 0xbf}], 0x1, &(0x7f0000000100)=[@rthdrdstopts={{0x70, 0x29, 0x37, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x46}, @ra={0x5, 0x2, 0x20}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x80}, @generic={0x40, 0x41, "e9e08f2229a8bb31ec6912d542928731b3801cda5436f22d35f0dbdab30a46e0074b3d58371ca60e43185515f818ea2e1dbe81bef813822192192d5d8dd75d9e94"}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x2c, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x5, [0x10000, 0x5, 0xfffffffffffffe00]}}, @padn, @ra]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x3c, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xd0}, @calipso={0x7, 0x10, {0x3, 0x2, 0x49, 0x5db, [0x3ff]}}, @generic={0x7, 0x30, "e7495f3f6cb2a30e5542a9d30a6bae393d6385e47f3e70cbaaf68921a135f27f793e4bc4c58f9091ba8d2c6450156439"}, @generic={0x3f, 0x1c, "78f18366fe13e08aab806115567b949af9c02922979873f7a05119f6"}]}}}], 0x130}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x4}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)="e3e348d3846df6229fdf6c092901883530b71e41af47c8a4b5722b12a119d19e1a423f903372d0796517ebca4c63d057c4c88b81098d40f3e3f005a135a67af3fe17e2b6c73993bfcbe6b5d22bd14cbb1263011d7891b7741699ab7fb22e68be9fe6cd2eea8bac1e31e8eed15b3eb284f94e0cfbf965ccf49c61674b01598ebf571a3d23147057701e1a28676be65ed22d8b815c7f39ea410b173afde86a9ec2433e279cc9a46e54a7868db183e5fed547f7c02d2603609e1abe0f0b130f389f5623a53d95a2f7dd1f352f23730e", 0xce}, {&(0x7f0000000380)="cc16b9d7546f657b51dff5ac475207550adbc7a16101a1dde7b69e05e56eb8c15b8132e85e1b5808990eceed2152051f723c1a27e83d9dc2819216aac3f73e2dee8c60e53d23a99ea6e0903dba0ba9c19115fdd6d101339f3574fdfd04716fce7c73b055d07e2be040612db32df3f3816c84bd6d73a0163675783755b5c35547340a10ecb8146d73d52c95da770fa4f32f090f6091e7cd6c2f84da9d71b026b6b269efc104b90aac09468c656a7097954937106a024ce68f28702aa626b13584ad2afe7b285f4e5c632a7c7b67c7c9c1d9efc26916ea7635275f7f0e21f8970b23d9cbf8199b589ceb93", 0xea}], 0x2, &(0x7f00000004c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0xff, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x1, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0x25b}}, @dontfrag={{0x14, 0x29, 0x3e, 0x61b2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r8}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x108}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0x3, @remote, 0x72a6cdae}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="226a6a578b37076496b957a0ea91094277837fff050dceb753d21e569e4db2f089", 0x21}, {&(0x7f0000000680)="d7b976ddcbecbe5d943f56b868a9109a9e1046afbe7148bb0f4826d9249244f79b3c4538da1197cbd3ae3151c7255e78f6a17a1e80dc984bcbd7104da0", 0x3d}], 0x2, &(0x7f0000000700)=[@dstopts={{0xd0, 0x29, 0x37, {0x3b, 0x16, '\x00', [@generic={0x7, 0x42, "f504df23c3a74f1fec1c0f88163fe316332152615fc3a668d6acf785475350195e530a93a70551ba3f33554b4fb172102a46d21a4ffcd7c1797c4c4c4e49b29055d1"}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x48, {0x1, 0x10, 0xe2, 0xfb5, [0x7, 0x7, 0x1, 0x7fffffff, 0x36bb95, 0x7, 0x3, 0xff]}}, @jumbo={0xc2, 0x4, 0xc608}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x2820}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts={{0xe8, 0x29, 0x36, {0x11, 0x19, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0xef, 0xb9, "49e28f6c94ad141e30896e2d559605378c851ca1eacfdc7ac630e24a2efcc9d9e51859735a788e2f26b76302b3370532f4d4594d9e034ce73e50cc169b9d51b12f0c3b12db52dbc08350e6f3f1311347ab80edd92c8987473258f737971b18d7b53d3f1f436a3c24ffe6ece1337d129df5053288e23b61574c46fd15932feb2081eaae0eedfbc41ba3c453ffb937b24d9cfbce44b61ec5a656ce1b6e3a6a93097ed5e92f5812aec19d408edde69acc8951d3b8141df74411ef"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1b8}}, {{&(0x7f00000008c0)={0xa, 0x4e24, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000900)="38c42b085c6f22dd8eb5f06ad3093dcbc57b2708c126a5304e5b4ac989ba3d1726a1e533f19fcc7a362e15b5fa553415b040297221fb05ed2f056957a91f4fc979d548276d85d478f4554d4073596cc4da02186daea6de20ccfc7c3a98464c6e9ab09a900eef3aba9c9bec4b7443dea845c46bbe4fd2246a54a5834e62da608d42652b608dbeac670fdf3369dd81188342f0f143f39647decbd6", 0x9a}, {&(0x7f00000009c0)="4f686a4461b744dd881e79b5edaf8dd10637148c287caabef4b70d4e6cfd1a3679e5fe4864a10486c9a884896c0ed25bab47cda4fde94bd2fb92fd12e3286bf2f8b76f5191d8d161e13e465d73f12780af9a654b942b4d3d1ab75117e1c955df21eef55d4727f801cb76b97d53faf462c303bae4eb5481d97b40dc427973d40e32fecdc32ebfbe1948057efed769a1b460e94f7d4f0395c6af0a1dab1303e33e097545dee72763b33a5a18a23734e6427db830dfa4b084da564c310e1da534cd926179837e0ec12224ad52dddd66815ee5734929f8410b5a7df29b341401da9f6cd41752efb7e64758fbe7249e8713baf78774ab73ee9a8de3", 0xf9}, {&(0x7f0000000ac0)="9c644f0ac751f5fe0820d38d229310b7b0efa27254c8f69a6a181b4790c023aca9c109da6f0984fbcb7849c0599108be7d78392c11ccc1bfccb488f777fbbbcb34ecfbab8835cf15d656e0826916abd5c721688b3563f4935178c4b3955f51e4537823b063ebfbbc97da2863d149a37299cc7864cd1cb210010c7bf7bb0229061a4ec93918e2c9603ab96ff013e6d4e5c14e5c036745ad8e616e4e9b00e3d1", 0x9f}, {&(0x7f0000000b80)="22b5d2582e616c3a12ba71c19a2cc2c0cf85e4b54a5caca220be1cbad6521d1dab9dad17f1f40aac0cf4fc33dae7fe87793d0a5e26f5aa87d0e8c855fbad27a7f03c9cfc9aea0e2b33aa27f829ca49c9fb30d38184587c62d9e14c462bed8ef531320ac0004af39a5b20625c4807eddcd8a9778c2bf71676cf796c425f0d34ea88e8bec262a634fa270a814b5cbe98f5364cb8184f486789c71be5c4e6ad42ccdb138d9f0f26eb2c4146a4", 0xab}, {&(0x7f0000000c40)="fe9eca7dc40c77bf06194977ca47e1821dc61ab7f3a0a8554a95564cd10e143e93e04929e77777233942991d1adf981070b303f24acb6516b20592459f3f8b9514ecaa7580e586c64a868b6a8211f9b70e2d4055bad6973f6633d02fda474144f9782cd15037a3c38cba782c72c3d97cf618a0f173d9129284a5a3eb35d638294d11806ea168fcdc498c858834d975545ad295ac3cd82255b468", 0x9a}, {&(0x7f0000000d00)="4754d317c95c5025eb7ae9eda4f2e2b444a43dcd2c0805a519606c7fdf15133b64e862227538aeeb3b9fa4fa7875b16c946a65ac21a96a0af10faa06d899f427be1f3d74b5496d5c07eb5ae83f55a5fd1c7f70bf7294a221d06a3f004dd02016cde984355586d29a014b821585b9259b567ea6ff4ea992ceba0a7fe0daa76b0bdbff9271bf386e7fe93a126e65dce70cf4babe009cbab9336b73439c8303f2ae229e1689a9e014bf0b8a31ca3afd0a405b0ac082109833aa4ffa5c1d2b09f5812ee6c1d876b876b9af69e8b82be7658e2c2b94bd1d288fbd4bf43b9db51d4976163572486e7c6e0e25ea149f00", 0xed}, {&(0x7f0000000e00)="5edd5278164a98506ac93795b97c986f08be37a2b7d5fcf1ea6683c40204a1fbbe4fa47e3a7e2ea8544ce724005f63a44f7166fd9cb2ecbaf0750d0e9f9e32cd12b70580cd12e5c6dc30aa50076c72e4467b68ed255eb4c831e6ba31d7c06249236c47e564f1e56af6f2fa861be97c9d26e6c93abba26824a628e7a1d92f1d6742ba777a668891939b4b3f1d70a51b81e45d6c82d7f8201ffab121f6b05413ae6be8337cf9a7f630e2906e0d96705e3369b353b336e973d282b4dacc649ee8b795d0e0e265bc6db4ce32755e0c81a1ea4af6095f4d8d5d3f210f017667a2d33d63b00387f32eac176104b47e0e77", 0xee}, {&(0x7f0000000f00)="6bbf7506461006356e2d7e36d237280f26a6264c61c639733c9c1a31453d9e7af3f13f228bcb7ed73113be2124ffaa68c0cd65e30c90d38929cdb69432dee93c03491daa0ccf664c17d8a19c2dd1267dcc677e9e8e25c6cd82fab3b28bd308063b0417003cb44ec2b87936d68fa04b5a9ad63b82d29b8cea869b23d2efada99df6841041b517d1e5e0e09f78fe9ec14163b4f542c047818512a7c6b7ec6b824fa4ddec", 0xa3}], 0x8, &(0x7f0000001f40)=ANY=[@ANYBLOB="98000000000000002900000039000000041001000000000020010000000000000000000000000001fe800000000000000000000000000036fe800000000000000000000000000043fc000000000000000000000000000000fc000000000000000000000000000001fc00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0052197be424b37d06df3e728bb0a42901af134ff64664cf531c6ce19b97843a6d157cc68f35aa8162216c308ce4caaaf77a2914cada6f68139acfad23b38439a3df"], 0x98}}, {{&(0x7f0000001040)={0xa, 0x4e23, 0x2, @loopback, 0x46efda3a}, 0x1c, &(0x7f0000001080)=[{&(0x7f00000011c0)="bf61ae955274731a5bf584ad2f626b5c30c07a7c79780bb08129815ac625af4f066020d2c4a507d7173c8598a83a7602d755351b79344e3ec717a52d902999441d5ac63f3c71e1f89efac10a14d1c0664639c91a5a88b58dbfe6a4e75cf015d6fb0c9c4bb0e122fa50117932e558b41a62998d1f17fa4e33b26ffea90a923d8d117fc385f26e4a9e2774eb6cf94274be8f705d6c1dcc04e1fedca2ed32a76151a72e7b37f793214765e9ba7d395525aaff98da4ffddd904d230407592b54372fece00a", 0xc3}], 0x1, &(0x7f00000012c0)=[@hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0xfd}}, @ra={0x5, 0x2, 0x81}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x73, 0x4, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x2c, 0xe, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x38, {0x2, 0xc, 0x80, 0x8000, [0x4, 0x6, 0x7, 0x1, 0x2, 0x81]}}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xffff9e20}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0xcc0}}], 0x1a8}}, {{&(0x7f0000001480)={0xa, 0x4e20, 0x7fffffff, @remote, 0x3}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000014c0)="48baf146d4d338f2c0b93d6d26e6b4e69d08771367ddc45062f4018fb901876df5bb930ba97f689b8c94c226d076f37cb7dad0b73b9335a019f7167155efb03183c313ea1b7ac23c3c9c4d05468032c7fd3201f600dbb3e39e4b5e62a00e533b2dfa81642745ab044fc1f45a38836eb3aecd9f6ee344f934dcc7d4485e7a51e7cfbfe67ce2f50420823030dd704d63e4143f4d351b4577b18fc0840aa2a3ea4cdef71a57c8898f4992fe00576fed215fc49cb70b4be5f4049fc7e031778827d3b97694398816e151d5d8bd521dc257940bb58f251390c526582e9cd96f2ddb4891989f697f87fddfaa90021c157c60e090be90b8c3", 0xf5}, {&(0x7f00000015c0)="72fa30a9a5599378313238842d86b2b7", 0x10}, {&(0x7f0000001600)="6f210c7b19a62addec97e54c6ad7196d58cfbf74d3fe9757aac6d6db6d5af5328fa139c40c60630532331d6ad495ce0981b640d45f9a84deb1b6183523d2c1596719846ae82816e55b5004343f7592c2f805df5a81c5dbc24f1905e30c0ff3828d4f8119873316d0111e19334a436550b536e45568a3c6903406c21d8d9658db03b10f770253f32474d39ce1fc909bc49c9c6b18559f53ad05d64ff878066434515acca14015498fbb87fb0aa8e003711bc2257fb186841dc096050ee36622dd82771b1b25040dbb0488f2f7f87c7d", 0xcf}, {&(0x7f0000001700)="92d7469a45b9a27ecdb794b60ac85f69a4c232730c42554b1adc06be3e418f8edfed882481ae80281a49f6864641f857fc999202b93924e4249565c5622730a6e3538ba1f326312c24954090afb044fefdd7d8242a50c70278ef43d632ed", 0x5e}, {&(0x7f0000001780)="8c11bb2088e402387a9345d82e294b15177ee391f27fc0861b56dd6be85846e77ab2a31a5cba2f88f6f5f8b3ffe8dfbac5f78a3cee292cdd56460111833c8ed6ee0e", 0x42}], 0x5}}, {{&(0x7f0000001880)={0xa, 0x4e24, 0x2b3, @mcast1, 0x3}, 0x1c, &(0x7f0000001980)=[{&(0x7f00000018c0)="f26140fbc667de3fee96d91d99dea00b1cce321687a149aee18a3397c465c7d560ae07cf3a97adb60033ff5a69d45ea99e", 0x31}, {&(0x7f0000001900)="7f25f301058f3aebaa3b6a3bfcc802eae4eb899df98d127928ad5b501fc276ec85e77bd4e8f67f47553a146b0253", 0x2e}, {&(0x7f0000001940)="8e630bdeda636e05be96b17daf3fb124db8dfa661d1fe8bd6777b9807ecf520896f2c23ac6766b3e82b4", 0x2a}], 0x3, &(0x7f00000019c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x4a}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x6, 0x2, 0x3f6e48d0592bb0ae, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x66b}}], 0x60}}], 0x7, 0x80) 10:50:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000600024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1578.033256][T30767] loop3: detected capacity change from 0 to 1 10:50:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) syz_open_pts(r3, 0x200200) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) syz_open_pts(r2, 0x202000) r4 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:50:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1578.078072][T30767] loop3: p2 < > p3 p4 < p5 > [ 1578.084202][T30767] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.103163][T30767] loop3: p3 start 225 is beyond EOD, truncated [ 1578.109429][T30767] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.148092][T30767] loop3: p5 start 225 is beyond EOD, truncated [ 1578.180879][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.183989][T30843] serio: Serial port pts0 [ 1578.185985][ T1038] loop2: p2 size 2 extends beyond EOD, truncated 10:50:18 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000dff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 10:50:18 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r5, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x1000, 0x8, 0x0, {0x0, 0x0, r5}}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1578.193796][T30845] loop4: detected capacity change from 0 to 1 [ 1578.203209][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.209753][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.220553][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.242241][ T1038] loop2: p2 < > p3 p4 < p5 > 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xf, @local}, 0x1c) 10:50:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:18 executing program 2: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1578.247273][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.254716][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.261132][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.271169][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.283002][T30845] loop4: detected capacity change from 0 to 1 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x4) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1578.318709][T30878] loop3: detected capacity change from 0 to 1 [ 1578.343855][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.348973][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.356078][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.357861][T30878] loop3: p2 < > p3 p4 < p5 > 10:50:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000040600024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0xfffffffffffffffe, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r5, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x2004010}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x88}}, 0x20050) timer_create(0x4, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="f035eb27917f7c7e8f8b4079de44a92d8d6638da8768c97f879cd032052f36d587cc1c4dba26fd191f359dc9", &(0x7f0000000640)="75281f9b7a3f5c5ae781d70887111878c6c3ffdf053ce09ed041d8c0afbe641d6fa62581a12a188e5ae787706c27f4a69fa4d29fc3fbaa6fa94dd550e94c1aa68230219bd38edce420dd2ea01940ec3597d2ffa9f28b0f6d9de51c09065109f903670d20223a0f915401f0f0a11eacb2d092107c7f25fa3ed99203ee5be86800ed5f62f3b64d1e10d0e75a2cb325b803e7e7ebee5a4e2f004ebd2026f913323b8e533c6f6fb057fa2775e5c7b63666539f1cb1f34f72da43b47621458aa7e331d199e0a024e4dc13bd9812fc22404daad272f5f6e8f021eed0a28c86c7937f2e14b23f29cbd7e16a5c7bf98e140ffed7"}}, &(0x7f0000000380)) r6 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000013) [ 1578.362368][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.368746][T30878] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.382035][T30878] loop3: p3 start 225 is beyond EOD, truncated [ 1578.388355][T30878] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.400260][T30878] loop3: p5 start 225 is beyond EOD, truncated [ 1578.409146][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1578.430410][T30899] serio: Serial port pts0 [ 1578.462064][T30878] loop3: detected capacity change from 0 to 1 [ 1578.475236][T30914] loop4: detected capacity change from 0 to 1 [ 1578.483454][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.487601][T30878] loop3: p2 < > p3 p4 < p5 > [ 1578.489624][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.493439][T30878] loop3: p2 size 2 extends beyond EOD, truncated 10:50:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x8000}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x270, @empty, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0xfffffffffffffdc1) setuid(r6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@empty, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x1, r5, r6}, {0x6, 0x1f, 0x2, 0x9, 0xfff, 0x8, 0x7, 0x5}, {0xffff, 0x4, 0x7, 0x9}, 0x24000000, 0x6e6bc0, 0x1, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x2b}, 0x2, @in=@remote, 0x3504, 0x0, 0x1, 0x3, 0x200, 0x8, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1578.507013][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.507811][T30878] loop3: p3 start 225 is beyond EOD, truncated [ 1578.513219][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.519522][T30878] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.545053][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.548876][T30878] loop3: p5 start 225 is beyond EOD, truncated 10:50:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) 10:50:18 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000eff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1578.598850][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1578.599321][T30914] loop4: detected capacity change from 0 to 1 [ 1578.603888][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.625282][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1578.631978][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.635314][T30947] serio: Serial port pts1 [ 1578.644741][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1578.694496][T30954] loop3: detected capacity change from 0 to 1 [ 1578.702205][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.706953][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.715135][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.721391][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.728961][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.738104][T30954] loop3: p2 < > p3 p4 < p5 > [ 1578.743318][T30954] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.758749][T30954] loop3: p3 start 225 is beyond EOD, truncated [ 1578.765063][T30954] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.773125][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.778607][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.785592][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.791916][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.799019][T30954] loop3: p5 start 225 is beyond EOD, truncated [ 1578.799858][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.851883][T30954] loop3: detected capacity change from 0 to 1 [ 1578.865985][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.871791][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.879342][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.885628][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.892870][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1578.907667][T30954] loop3: p2 < > p3 p4 < p5 > [ 1578.912557][T30954] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.914722][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1578.920764][T30954] loop3: p3 start 225 is beyond EOD, truncated [ 1578.924476][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.929997][T30954] loop3: p4 size 2 extends beyond EOD, truncated [ 1578.938430][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1578.944324][T30954] loop3: p5 start 225 is beyond EOD, truncated [ 1578.948986][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1578.962233][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1579.019814][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1579.025163][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1579.032897][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1579.039443][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1579.046210][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1579.083533][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1579.088563][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1579.095542][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1579.102132][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1579.109353][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000700024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) 10:50:19 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000fff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:19 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r4, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r6, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r10, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1e0, r4, 0x820, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "d32892f351479ea30d2913d1392b1e6da43928956b00c304108ba9c9d9e69b3f37f8bada1a869bee1bcc8d913f433fef099b089051e9d0c6ea3330cb828732df1d2e8f0de02d97e9ddc03c04e2286566b45c68f0392e86ebd9e4c5823875e2f2a98786f68e6b88279388a0d40a9d43ac4bb515a205"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '+k^%\'/#\\$\xa0@]\'\x93&\\*{\xcdy\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040000}, 0x1e5649ce64e02656) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1579.253665][T31028] loop4: detected capacity change from 0 to 1 [ 1579.276621][T31030] loop3: detected capacity change from 0 to 1 [ 1579.289509][T31031] serio: Serial port pts1 10:50:19 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1579.352685][T31030] loop3: p2 < > p3 p4 < p5 > [ 1579.358227][T31028] loop4: detected capacity change from 0 to 1 [ 1579.362386][T31030] loop3: p2 size 2 extends beyond EOD, truncated [ 1579.373572][T31030] loop3: p3 start 225 is beyond EOD, truncated [ 1579.379852][T31030] loop3: p4 size 2 extends beyond EOD, truncated [ 1579.388141][T31030] loop3: p5 start 225 is beyond EOD, truncated [ 1579.424311][T31030] loop3: detected capacity change from 0 to 1 [ 1579.472065][T31030] loop3: p2 < > p3 p4 < p5 > [ 1579.477584][T31030] loop3: p2 size 2 extends beyond EOD, truncated [ 1579.486847][T31030] loop3: p3 start 225 is beyond EOD, truncated [ 1579.493133][T31030] loop3: p4 size 2 extends beyond EOD, truncated [ 1579.501815][T31030] loop3: p5 start 225 is beyond EOD, truncated [ 1579.521842][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1579.526692][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1579.534167][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1579.540447][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1579.547677][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1579.596840][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1579.602026][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1579.609082][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1579.615450][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1579.624212][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7f, 0x404000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x3, 0x8, "168d54058b1c0f58822b7c88332c51de70b251"}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:21 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:21 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000800024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:21 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x25d}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_setup(0x7f78, &(0x7f00000002c0)={0x0, 0xd06e, 0x8, 0x1, 0x248, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r4, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r6, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r4, 0x20, {0x0, r0}, 0x1, 0x9, 0x0, {0x0, r5, r6}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) sendto(0xffffffffffffffff, &(0x7f0000000200)="7feb0471de179fe9004aa0b1ac581b126efd1b48300ce98325fa5d284cd54947b413fca713655746dc72f98f4fac39e072176fc635faa4ffc50c798d3cf9a07b3bc3bcff9863f472b176c7a65ba74ae82f05a191c3e445c52542075dc920907f2400bf047e78410308a0952fcfb95bfe2c60c0e5a489441e711725505f327b593b4820", 0x83, 0x20048050, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) close(r0) 10:50:21 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:21 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000011ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) [ 1581.459372][T31085] loop4: detected capacity change from 0 to 1 [ 1581.463952][T31086] loop3: detected capacity change from 0 to 1 [ 1581.475556][T31087] serio: Serial port pts0 [ 1581.507061][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1581.512080][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1581.516428][T31100] serio: Serial port pts1 [ 1581.520783][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1581.529213][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1581.536178][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1581.541267][T31086] loop3: p2 < > p3 p4 < p5 > [ 1581.549733][T31085] loop4: detected capacity change from 0 to 1 10:50:21 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:21 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000900024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1581.556624][T31086] loop3: p2 size 2 extends beyond EOD, truncated [ 1581.565390][T31086] loop3: p3 start 225 is beyond EOD, truncated [ 1581.571796][T31086] loop3: p4 size 2 extends beyond EOD, truncated [ 1581.581363][T31086] loop3: p5 start 225 is beyond EOD, truncated 10:50:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3d2, 0x0, 0x40}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1581.619820][T31086] loop3: detected capacity change from 0 to 1 10:50:21 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xfa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1581.665421][T31128] serio: Serial port pts0 [ 1581.670962][T31086] loop3: p2 < > p3 p4 < p5 > [ 1581.675833][T31086] loop3: p2 size 2 extends beyond EOD, truncated [ 1581.683738][T31086] loop3: p3 start 225 is beyond EOD, truncated [ 1581.690023][T31086] loop3: p4 size 2 extends beyond EOD, truncated [ 1581.697021][T31086] loop3: p5 start 225 is beyond EOD, truncated 10:50:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) [ 1581.716489][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1581.718252][T31138] loop4: detected capacity change from 0 to 1 [ 1581.721614][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1581.736389][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1581.742737][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:50:21 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000012ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1581.762307][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1581.777933][T31152] serio: Serial port pts1 10:50:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xfb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x4, 0xfffffff9, 0x0, 0x7f, 0x10, "946a1bef3db8fbce1bbf77802909f3b4a74e40"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) openat$cgroup_ro(r2, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x19) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000140)={{0x1, 0x80}, 0x0, 0x4, 0x10001, {0x4, 0x9}, 0x80, 0x4}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) socket$inet6(0xa, 0x5, 0xfffffffb) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1581.822284][T31138] loop4: detected capacity change from 0 to 1 [ 1581.912214][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1581.917696][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1581.920566][T31176] loop3: detected capacity change from 0 to 1 [ 1581.931319][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1581.937560][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1581.944656][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1581.979700][T31176] loop3: p2 < > p3 p4 < p5 > [ 1581.985202][T31176] loop3: p2 size 2 extends beyond EOD, truncated [ 1582.001883][T31176] loop3: p3 start 225 is beyond EOD, truncated [ 1582.008167][T31176] loop3: p4 size 2 extends beyond EOD, truncated [ 1582.020009][T31176] loop3: p5 start 225 is beyond EOD, truncated [ 1582.037221][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1582.042149][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1582.050412][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1582.055143][T31176] loop3: detected capacity change from 0 to 1 [ 1582.056623][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1582.069604][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1582.090855][T31176] loop3: p2 < > p3 p4 < p5 > [ 1582.096161][T31176] loop3: p2 size 2 extends beyond EOD, truncated [ 1582.104748][T31176] loop3: p3 start 225 is beyond EOD, truncated [ 1582.111010][T31176] loop3: p4 size 2 extends beyond EOD, truncated [ 1582.118160][T31176] loop3: p5 start 225 is beyond EOD, truncated 10:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x1484, 0x0, 0x1, 0x4, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/89, 0x59, 0x29bb) 10:50:22 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000a00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:50:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xfc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) r5 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) tkill(r3, 0x1000000000013) 10:50:22 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000013ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:22 executing program 1: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0x8, 0x8, 0x9, 0xffffffff, 0x0, "c15c1ffe554fcf5644fd404930c7bc6419e2af"}) read(r2, 0x0, 0x2000) ptrace$poke(0x5, r0, &(0x7f0000000100), 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x207) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) timer_create(0x1, &(0x7f0000000140)={0x0, 0x12, 0x4, @thr={&(0x7f0000000380)="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", &(0x7f00000005c0)="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"}}, &(0x7f0000000080)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1582.416708][T31215] loop4: detected capacity change from 0 to 1 [ 1582.417543][T31216] serio: Serial port pts0 [ 1582.425680][T31217] loop3: detected capacity change from 0 to 1 10:50:22 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000b00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:22 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000180)={0x0, 0x72b5, 0x0, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x1010, r0, 0xfa178000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f00000000c0)={0x2446, 0x3, 0x2, 0x0, 0x1, 0x1, 0x4}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x7fffffff, 0x3, 0xfffffffffffff935, 0x1000, 0x9dfa, 0x5}) io_uring_enter(r3, 0x143b, 0xf3b7, 0x3, &(0x7f0000000000)={[0x7fffffff]}, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1582.468990][T31232] serio: Serial port pts1 [ 1582.477867][T31217] loop3: p2 < > p3 p4 < p5 > [ 1582.483347][T31217] loop3: p2 size 2 extends beyond EOD, truncated [ 1582.503759][T31217] loop3: p3 start 225 is beyond EOD, truncated [ 1582.510068][T31217] loop3: p4 size 2 extends beyond EOD, truncated 10:50:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xfd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1582.513884][T31240] loop4: detected capacity change from 0 to 1 [ 1582.519669][T31217] loop3: p5 start 225 is beyond EOD, truncated 10:50:22 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xfe, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1582.604726][T31240] loop4: detected capacity change from 0 to 1 [ 1582.616501][T31217] loop3: detected capacity change from 0 to 1 10:50:22 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x7) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000020000180080001000e50a5af7fe3297c01260144fd7a164d56ef7401d364ba26351ee4c927607fafa957ff44c4a93abdb4b2aaad2b73424cb1c01602e7a623cb2f", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f62726964676500"], 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)={0x34, r6, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@acquire={0x1d4, 0x17, 0x4, 0x70bd27, 0x25dfdbfb, {{@in=@private=0xa010102, 0x4d6, 0xff}, @in=@local, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e20, 0x0, 0x4e24, 0xfff7, 0xa, 0x80, 0xa0, 0x4, r3, r4}, {{@in=@broadcast, @in6=@local, 0x4e21, 0xbb, 0x4e22, 0x1, 0xa, 0x0, 0x0, 0x2c, r8}, {0x3, 0x800, 0x5, 0x2, 0x5, 0x1, 0x7, 0x4}, {0x0, 0x3, 0x1, 0x4}, 0x7, 0x6e6bbc, 0x2, 0x0, 0x3, 0x2}, 0x9, 0x8, 0x4, 0x70bd2b}, [@policy={0xac, 0x7, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4e24, 0x3, 0x4e23, 0x6, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffb, 0x8, 0x0, 0x7, 0x24, 0xb5, 0x800, 0x1}, {0x81, 0x100, 0x5, 0x2}, 0x6, 0x6e6bba, 0x0, 0x0, 0x3}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8014}, 0x1) r9 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f00000005c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x100) io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x4000001) r4 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)) [ 1582.667611][T31217] loop3: p2 < > p3 p4 < p5 > [ 1582.672579][T31217] loop3: p2 size 2 extends beyond EOD, truncated [ 1582.694806][T31217] loop3: p3 start 225 is beyond EOD, truncated [ 1582.701321][T31217] loop3: p4 size 2 extends beyond EOD, truncated 10:50:22 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000c00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:22 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x200, 0x10, 0x2, 0xb}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x15b4, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8db3ed68230b63a6}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) pwritev2(r0, &(0x7f0000001680)=[{&(0x7f0000000200)="f4c70c0351b75050fb1397b51e23360973c644", 0x13}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="b97db495c6dc2bd2d5a9a7091bbe447466667113c77ed52766f86e3cbb041a7df19e90559fe024a343e26f3e7342448d4b0737745a9196b5f98278af08355a1cf32c17b80bfe80a3b8aa79a3964d4088fd99f2524dee32d91cbfbc9e95040971cda30c26249d19d68d6e7a626c903628cf40429455d4f65d85d40333e3c1ba4e7cb0a8566a89b55659a5de480e32a5af7117eb0e2c9021cad182da92930dba3753a60ac0", 0xa4}, {&(0x7f0000001480)="e3370c7619d1f44aee952108f28da32ab4fbcbf06ca12adc1245de25d230fcbcb1d9e5dc27b018bba32859873dbbdef9e2ed7e67622167034dd5520b6d2d08b5856bac55a5a7055a2dbfe664c792cee66b67310f2c5dfec795df", 0x5a}, {&(0x7f0000001500)="593c7065cc36db720b54e8d898f76086b1d0efe36d8fb1d07c18e0cb3f88e7c55739d9b1bcffcd2c5af91363051cff2f1d307a757e0703acc9469546ab4292f6f091993f186184fd3e84b187ab6b50d59898fce66a21d28f463ba40d50f11a181081fe52036b8d026458dfa2207ec0bb3a6e", 0x72}, {&(0x7f0000001580)="5f06e918c3", 0x5}, {&(0x7f00000015c0)="2e3bcc6f38b6da4ba3a98c3e3d9e67669b23517cdfcf0e422000c09303af0a633b5bef643ff7b2eacd01537ab7ac4cb24b3bb9374fd7451d03b4b2e4aa43b0c150e041555b622fcebc6b43e8a1977bff3d1a42fe8a879fc7cee42353db2d886489f92ba8dddce0a3148c32690377d0b207275463fb71772e8330ba770954edd8e9943a2c152f8aca5a18b0c1b8b413bc0ced176521091ffb19928dcb11ce553bd38deb46645d6f81e07d", 0xaa}], 0x7, 0x1, 0x6, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd, 0x0, &(0x7f0000000000)="2c8af14fe3ca8fae9225ab246df2e0870077943582cb15ee7e2cc5c29c83dd", 0x1f, 0x1, 0x1, {0x0, r6}}, 0x7f) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x10003, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000017c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x4, 0x1, {0x3, r6}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f00000002c0)=@caif=@dbg, 0x0, 0x100c00, 0x59e805a6b7b0570, {0x0, r6}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x7953866bc0669252, r0, 0x0) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000001700)={0x20000, 0x110, 0x8}, &(0x7f0000001740)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r12}}, 0xffff7973) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r13 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r16}}, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000001900)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x7d, 0x0, 0x7ff, 0x4, 0x0, {0x0, r16}}, 0xff) [ 1582.716567][T31279] serio: Serial port pts0 [ 1582.723055][T31217] loop3: p5 start 225 is beyond EOD, truncated 10:50:22 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x1, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:22 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000020ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1582.802650][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1582.807885][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1582.815282][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1582.821610][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1582.834729][T31301] loop4: detected capacity change from 0 to 1 [ 1582.839828][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1582.860510][T31308] loop3: detected capacity change from 0 to 1 [ 1582.897670][T31308] loop3: p2 < > p3 p4 < p5 > [ 1582.902543][T31308] loop3: p2 size 2 extends beyond EOD, truncated [ 1582.910660][T31308] loop3: p3 start 225 is beyond EOD, truncated [ 1582.917055][T31308] loop3: p4 size 2 extends beyond EOD, truncated [ 1582.923988][T31308] loop3: p5 start 225 is beyond EOD, truncated [ 1582.990725][T31308] loop3: detected capacity change from 0 to 1 [ 1583.018472][T31308] loop3: p2 < > p3 p4 < p5 > [ 1583.023677][T31308] loop3: p2 size 2 extends beyond EOD, truncated [ 1583.031056][T31308] loop3: p3 start 225 is beyond EOD, truncated [ 1583.037271][T31308] loop3: p4 size 2 extends beyond EOD, truncated [ 1583.044885][T31308] loop3: p5 start 225 is beyond EOD, truncated [ 1583.563708][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1583.568902][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1583.575784][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1583.581996][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1583.588864][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone3(&(0x7f0000000400)={0x88000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x4}, &(0x7f00000002c0)=""/97, 0x61, &(0x7f0000000340)=""/85, &(0x7f00000003c0)=[r3, r3, r0, r3], 0x4}, 0x58) tkill(r4, 0x17) 10:50:25 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x5, 0x4, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x522, 0x3, &(0x7f0000000380)=[{0xfffffffffffffffc, 0x0, 0x80}, {&(0x7f0000000180)="844212eeb132e0e49014f230a2cfe14c505cc72041eb55c44f03f0a31a6138f0a7bd43d8757c98b73cbb4f6d85e5d4f4bb2e2676298c5dd0831ab7250386f3abf122682ecc4b1c92edc0ebc45bba05860f3e30fdf95f0f10abd0c20c400c16b1b714fb73046a5f6929b614b6933ea346227f6c6351310f75091544f969b8a7834a1618", 0x83, 0x1}, {&(0x7f00000002c0)="1a8117bfc170b927e7d3fa234d98eefba02614bc8d1854ced962d1f502082f5750a7ed8538b34cf48da23b7244a23c36e7682382ae9fd4da56231d7a75214bdfd167cc445c31271588d8ed09d88fbdef2939688ecfd718ba5cd55fadb909b073e34b6f66dfdb4d41b0ec5b655ed09528fd4edce8e41912904256811b022f0ffb9c6485451bca4c1e347671cc50ed", 0x8e, 0x9}], 0x2, &(0x7f0000000400)={[{@numtail}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x200}}, {@shortname_win95}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) openat$incfs(r3, &(0x7f0000000480)='.pending_reads\x00', 0x600443, 0x3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:25 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000d00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:25 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000120ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x4000001) r4 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)) 10:50:25 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x8000000) r4 = socket(0x10, 0x802, 0x0) sendto$inet(r4, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r4, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000840)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x6000, @fd=r4, 0x100000000, &(0x7f0000000780)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000180)}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/136, 0x88}], 0xa, 0x1, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1585.496373][T31351] loop3: detected capacity change from 0 to 1 [ 1585.499598][T31350] serio: Serial port pts0 [ 1585.505877][T31352] serio: Serial port pts1 [ 1585.510712][T31354] loop4: detected capacity change from 0 to 1 10:50:25 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(r3, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x7, 0x8, 0xfffffffb) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:25 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x30d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1585.572122][T31351] loop3: p2 < > p3 p4 < p5 > [ 1585.577473][T31351] loop3: p2 size 2 extends beyond EOD, truncated [ 1585.584589][T31351] loop3: p3 start 225 is beyond EOD, truncated [ 1585.590797][T31351] loop3: p4 size 2 extends beyond EOD, truncated [ 1585.603666][T31351] loop3: p5 start 225 is beyond EOD, truncated [ 1585.630048][T31354] loop4: detected capacity change from 0 to 1 [ 1585.645352][T31351] loop3: detected capacity change from 0 to 1 10:50:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000e00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:25 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1585.685920][T31351] loop3: p2 < > p3 p4 < p5 > [ 1585.691664][T31351] loop3: p2 size 2 extends beyond EOD, truncated [ 1585.700117][T31351] loop3: p3 start 225 is beyond EOD, truncated [ 1585.706336][T31351] loop3: p4 size 2 extends beyond EOD, truncated [ 1585.721865][T31351] loop3: p5 start 225 is beyond EOD, truncated 10:50:25 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000022ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1585.744393][T31401] loop4: detected capacity change from 0 to 1 [ 1585.851780][T31414] loop3: detected capacity change from 0 to 1 [ 1585.889407][T31414] loop3: p2 < > p3 p4 < p5 > [ 1585.894596][T31414] loop3: p2 size 2 extends beyond EOD, truncated [ 1585.902437][T31414] loop3: p3 start 225 is beyond EOD, truncated [ 1585.908776][T31414] loop3: p4 size 2 extends beyond EOD, truncated [ 1585.915803][T31414] loop3: p5 start 225 is beyond EOD, truncated [ 1585.925575][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1585.930791][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1585.938544][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1585.944972][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1585.952761][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1586.008725][T31414] loop3: detected capacity change from 0 to 1 10:50:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x5) tkill(r3, 0x26) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x9, 0xff) [ 1586.331811][T31391] serio: Serial port pts0 [ 1586.341433][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1586.346425][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1586.353925][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1586.360233][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1586.367362][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x4000001) r4 = syz_open_pts(r2, 0x402000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)) 10:50:26 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:26 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000024ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:26 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000f00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1586.445583][T31462] serio: Serial port pts0 [ 1586.447971][T31461] loop3: detected capacity change from 0 to 1 [ 1586.456466][T31463] loop4: detected capacity change from 0 to 1 10:50:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone3(&(0x7f0000000400)={0x88000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x4}, &(0x7f00000002c0)=""/97, 0x61, &(0x7f0000000340)=""/85, &(0x7f00000003c0)=[r3, r3, r0, r3], 0x4}, 0x58) tkill(r4, 0x17) 10:50:26 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000001000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x2a81) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0x6, 0x0, 0x8}) tkill(r3, 0x1000000000013) ioctl$KDDELIO(r1, 0x4b35, 0x3ff) 10:50:26 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1586.497540][T31461] loop3: p2 < > p3 p4 < p5 > [ 1586.502692][T31461] loop3: p2 size 2 extends beyond EOD, truncated [ 1586.518980][T31461] loop3: p3 start 225 is beyond EOD, truncated [ 1586.525277][T31461] loop3: p4 size 2 extends beyond EOD, truncated [ 1586.540436][T31461] loop3: p5 start 225 is beyond EOD, truncated 10:50:26 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000025ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1586.595627][T31489] loop4: detected capacity change from 0 to 1 [ 1586.635618][T31496] serio: Serial port pts2 10:50:26 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xfffffff9, 0x8, 0x7, 0x1, 0xf, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x100012) tkill(0x0, 0x32) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x4, &(0x7f0000000180)={0x9, 0x7}, &(0x7f00000001c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x1}, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0xd2, 0x7, 0x27d6, 0x2, 0x3, "4835357d76bcc91f803cca3153d911beeecf33"}) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:26 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1586.652666][T31505] loop3: detected capacity change from 0 to 1 [ 1586.670409][T31489] loop4: detected capacity change from 0 to 1 10:50:26 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000001100024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1586.697763][T31505] loop3: p2 < > p3 p4 < p5 > [ 1586.702663][T31505] loop3: p2 size 2 extends beyond EOD, truncated [ 1586.728834][T31505] loop3: p3 start 225 is beyond EOD, truncated [ 1586.735096][T31505] loop3: p4 size 2 extends beyond EOD, truncated [ 1586.743461][T31505] loop3: p5 start 225 is beyond EOD, truncated [ 1586.777627][T31532] loop4: detected capacity change from 0 to 1 [ 1586.858660][T31532] loop4: detected capacity change from 0 to 1 10:50:27 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000026ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:27 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:27 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000001200024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1587.299650][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1587.303243][T31552] loop4: detected capacity change from 0 to 1 [ 1587.304678][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1587.318150][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1587.318221][T31556] loop3: detected capacity change from 0 to 1 [ 1587.324376][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1587.337667][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1587.357727][T31556] loop3: p2 < > p3 p4 < p5 > [ 1587.363356][T31556] loop3: p2 size 2 extends beyond EOD, truncated [ 1587.363553][T31564] serio: Serial port pts0 [ 1587.375140][T31556] loop3: p3 start 225 is beyond EOD, truncated [ 1587.381406][T31556] loop3: p4 size 2 extends beyond EOD, truncated [ 1587.407791][T31552] loop4: detected capacity change from 0 to 1 [ 1587.415697][T31556] loop3: p5 start 225 is beyond EOD, truncated 10:50:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7f, 0x404000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x3, 0x8, "168d54058b1c0f58822b7c88332c51de70b251"}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:27 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xb00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:27 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000227ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:27 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000002000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1587.488049][T31585] loop3: detected capacity change from 0 to 1 [ 1587.504002][T31591] serio: Serial port pts2 [ 1587.509743][T31585] loop3: p2 < > p3 p4 < p5 > [ 1587.514927][T31585] loop3: p2 size 2 extends beyond EOD, truncated [ 1587.522789][T31593] loop4: detected capacity change from 0 to 1 [ 1587.524833][T31585] loop3: p3 start 225 is beyond EOD, truncated 10:50:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) tkill(r3, 0x1000000000013) [ 1587.535214][T31585] loop3: p4 size 2 extends beyond EOD, truncated [ 1587.543230][T31585] loop3: p5 start 225 is beyond EOD, truncated [ 1587.601699][T31593] loop4: detected capacity change from 0 to 1 [ 1587.609170][T31608] serio: Serial port pts0 [ 1587.626892][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1587.632215][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1587.640451][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1587.648159][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1587.656515][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:29 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0xffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:29 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00002eff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xc00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7f, 0x404000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x3, 0x8, "168d54058b1c0f58822b7c88332c51de70b251"}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000002200024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) tkill(r3, 0x1000000000013) [ 1589.710759][T31641] loop4: detected capacity change from 0 to 1 [ 1589.710818][T31638] loop3: detected capacity change from 0 to 1 [ 1589.719882][T31642] serio: Serial port pts0 [ 1589.740110][T31643] serio: Serial port pts1 [ 1589.752033][T31654] serio: Serial port pts2 10:50:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000002500024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xd00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1589.777667][T31638] loop3: p2 < > p3 p4 < p5 > [ 1589.783893][T31638] loop3: p2 size 2 extends beyond EOD, truncated [ 1589.817172][T31638] loop3: p3 start 225 is beyond EOD, truncated [ 1589.823781][T31638] loop3: p4 size 2 extends beyond EOD, truncated [ 1589.836250][T31638] loop3: p5 start 225 is beyond EOD, truncated [ 1589.839036][T31668] loop4: detected capacity change from 0 to 1 10:50:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) tkill(r3, 0x1000000000013) [ 1589.890984][T31638] loop3: detected capacity change from 0 to 1 [ 1589.903001][T31662] serio: Serial port pts0 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xe00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1589.934684][T31638] loop3: p2 < > p3 p4 < p5 > [ 1589.940804][T31668] loop4: detected capacity change from 0 to 1 [ 1589.946275][T31638] loop3: p2 size 2 extends beyond EOD, truncated [ 1589.959529][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1589.965051][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1589.976271][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7f, 0x404000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x3, 0x6, 0x5, 0x3, 0x8, "168d54058b1c0f58822b7c88332c51de70b251"}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1589.978023][T31638] loop3: p3 start 225 is beyond EOD, truncated [ 1589.983303][ T1038] loop2: p4 size 2 extends beyond EOD, [ 1589.989950][T31638] loop3: p4 size 2 extends beyond EOD, [ 1589.989960][ T1038] truncated [ 1589.989967][T31638] truncated [ 1589.991423][T31694] serio: Serial port pts1 [ 1590.023893][T31699] serio: Serial port pts2 10:50:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8000000000d, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:30 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00003fff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000003f00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1590.028056][T31638] loop3: p5 start 225 is beyond EOD, truncated [ 1590.029547][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1590.058265][T31708] serio: Serial port pts0 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xf00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.113894][T31717] loop3: detected capacity change from 0 to 1 10:50:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1590.157655][T31717] loop3: p2 < > p3 p4 < p5 > [ 1590.170830][T31717] loop3: p2 size 2 extends beyond EOD, truncated [ 1590.193454][T31717] loop3: p3 start 225 is beyond EOD, truncated [ 1590.200230][T31717] loop3: p4 size 2 extends beyond EOD, truncated 10:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ata_port', 0x8000, 0x1) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x4000001) tkill(r3, 0x1000000000013) [ 1590.218286][T31735] serio: Serial port pts1 [ 1590.224239][T31717] loop3: p5 start 225 is beyond EOD, truncated [ 1590.231467][T31741] serio: Serial port pts2 [ 1590.231593][T31736] loop4: detected capacity change from 0 to 1 [ 1590.245015][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1590.251028][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1590.259951][ T1038] loop3: p3 start 225 is beyond EOD, truncated 10:50:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000001900)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcb5, 0x80}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x547, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/70, 0x46}], 0xa) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.267316][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1590.275219][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffff, 0x400000) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x7a4, 0x1, 0x6, 0x1, 0xe, "b6885ea0adaf75f412608048442a6fc8a8343c"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)={0x2, 0x1, 0x1, 0x9, 0x15, "7ec0a1e797bbfb35"}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) [ 1590.319383][T31736] loop4: detected capacity change from 0 to 1 [ 1590.327178][T31717] loop3: detected capacity change from 0 to 1 [ 1590.357423][T31771] serio: Serial port pts0 10:50:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000004000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x50, 0x0, 0x6, 0x9, 0x800, 0x8, 0x8000, 0x2}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1b) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x69, 0x8001, 0xfff, 0x5, 0x6, 0x5, 0xd6c, 0xffffc277}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000100)) close(r2) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:50:30 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000040ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.418924][T31780] serio: Serial port pts2 [ 1590.458175][T31785] serio: Serial port pts1 [ 1590.463802][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1590.469932][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1590.476923][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1590.483863][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1590.497712][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000ff00ffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xc) tkill(r3, 0x1000000000013) 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.499829][T31800] loop4: detected capacity change from 0 to 1 [ 1590.512303][T31803] loop3: detected capacity change from 0 to 1 10:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0xfcffffff00000000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1590.554520][T31813] serio: Serial port pts0 [ 1590.573530][T31803] loop3: p2 < > p3 p4 < p5 > [ 1590.580104][T31803] loop3: p2 size 2 extends beyond EOD, truncated [ 1590.589036][T31803] loop3: p3 start 225 is beyond EOD, truncated [ 1590.595996][T31803] loop3: p4 size 2 extends beyond EOD, truncated 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.604749][T31803] loop3: p5 start 225 is beyond EOD, truncated [ 1590.611135][T31825] serio: Serial port pts2 [ 1590.618980][T31800] loop4: detected capacity change from 0 to 1 [ 1590.644418][T31803] loop3: detected capacity change from 0 to 1 10:50:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000008004000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.694540][T31803] loop3: p2 < > p3 p4 < p5 > [ 1590.696910][T31849] loop4: detected capacity change from 0 to 1 [ 1590.699748][T31803] loop3: p2 size 2 extends beyond EOD, truncated [ 1590.713604][T31803] loop3: p3 start 225 is beyond EOD, truncated [ 1590.719929][T31803] loop3: p4 size 2 extends beyond EOD, truncated [ 1590.723077][T31855] serio: Serial port pts1 [ 1590.733801][T31803] loop3: p5 start 225 is beyond EOD, truncated 10:50:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x8, 0x8, 0x9, 0x4, 0x6, "eb3939f0fca7a665fd2927dd7cfff53b21bb92"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1590.743464][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1590.760700][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1590.770140][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1590.776512][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1590.777862][T31871] serio: Serial port pts0 [ 1590.784252][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000ff00ffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xc) tkill(r3, 0x1000000000013) 10:50:30 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000048ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1590.798963][T31849] loop4: detected capacity change from 0 to 1 [ 1590.819297][T31877] serio: Serial port pts2 10:50:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000004800024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x800) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x6, 0x40, 0x0, 0x80, 0x9, 0x5, 0x5, 0x8, 0x7}, 0x0) getrlimit(0x6, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() prlimit64(r3, 0x2, &(0x7f00000001c0)={0x5, 0x8}, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) tkill(r3, 0x1000000000013) [ 1590.934825][T31903] loop3: detected capacity change from 0 to 1 [ 1590.961400][T31907] loop4: detected capacity change from 0 to 1 10:50:31 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x6, 0x5, &(0x7f00000002c0)=""/15, 0xf, 0x11, 0x1, {0x0, r6}}, 0xffff0000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000004c00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1590.998604][T31903] loop3: p2 < > p3 p4 < p5 > [ 1591.001768][T31915] serio: Serial port pts0 [ 1591.006411][T31903] loop3: p2 size 2 extends beyond EOD, truncated [ 1591.018919][T31903] loop3: p3 start 225 is beyond EOD, truncated [ 1591.025177][T31903] loop3: p4 size 2 extends beyond EOD, truncated [ 1591.033387][T31903] loop3: p5 start 225 is beyond EOD, truncated 10:50:31 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x6, 0x5, &(0x7f00000002c0)=""/15, 0xf, 0x11, 0x1, {0x0, r6}}, 0xffff0000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1591.073712][T31927] loop4: detected capacity change from 0 to 1 [ 1591.149194][T31927] loop4: detected capacity change from 0 to 1 [ 1591.155534][T31911] mmap: syz-executor.1 (31911): VmData 29388800 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. 10:50:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:33 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x6, 0x5, &(0x7f00000002c0)=""/15, 0xf, 0x11, 0x1, {0x0, r6}}, 0xffff0000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:33 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00004cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:33 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) splice(r2, &(0x7f0000000280)=0x8793, r2, &(0x7f0000000300)=0x1, 0x1, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xb) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r4 = gettid() timer_settime(r3, 0x1, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000340)={0x3f000000, 0x4000007ffffffd}) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000002c0)={0x5, 0x9}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) syncfs(r6) tkill(r4, 0x1000000000013) 10:50:33 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000006800024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1593.738709][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1593.742484][T31951] loop4: detected capacity change from 0 to 1 [ 1593.743769][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1593.756581][T31955] loop3: detected capacity change from 0 to 1 [ 1593.763903][T31956] serio: Serial port pts0 [ 1593.773437][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1593.780025][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:33 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) r3 = syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1593.787735][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1593.799229][T31955] loop3: p2 < > p3 p4 < p5 > [ 1593.804239][T31955] loop3: p2 size 2 extends beyond EOD, truncated [ 1593.817891][T31955] loop3: p3 start 225 is beyond EOD, truncated [ 1593.824193][T31955] loop3: p4 size 2 extends beyond EOD, truncated [ 1593.833163][T31951] loop4: detected capacity change from 0 to 1 10:50:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:34 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x200) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1593.841870][T31974] serio: Serial port pts1 [ 1593.853127][T31955] loop3: p5 start 225 is beyond EOD, truncated 10:50:34 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000006c00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:34 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x200) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1593.904428][T31955] loop3: detected capacity change from 0 to 1 [ 1593.932828][T32003] loop4: detected capacity change from 0 to 1 [ 1593.943966][T31955] loop3: p2 < > p3 p4 < p5 > 10:50:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1593.950673][T31955] loop3: p2 size 2 extends beyond EOD, truncated [ 1593.975843][T31955] loop3: p3 start 225 is beyond EOD, truncated [ 1593.982219][T31955] loop3: p4 size 2 extends beyond EOD, truncated [ 1593.990026][T31955] loop3: p5 start 225 is beyond EOD, truncated [ 1594.005301][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1594.010402][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1594.018836][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1594.025403][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1594.032823][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1594.048257][T32003] loop4: detected capacity change from 0 to 1 10:50:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:36 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) syz_io_uring_setup(0x324e, &(0x7f0000000180)={0x0, 0x962f, 0x0, 0x0, 0x45}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:36 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00015cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:36 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:36 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000007400024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xfffffffe) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53b10012605b85c6117e00ccc10073fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19897d9ece95fc8cc81dd1acc683b029e59b900", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read(r4, 0x0, 0x24dcdf1ce24aeb06) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1596.823141][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1596.828018][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1596.842253][T32048] loop4: detected capacity change from 0 to 1 [ 1596.849701][T32051] loop3: detected capacity change from 0 to 1 [ 1596.856006][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1596.862282][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x80}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$int_out(r3, 0x5462, &(0x7f0000000180)) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1596.877249][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1596.908097][T32051] loop3: p2 < > p3 p4 < p5 > [ 1596.913381][T32051] loop3: p2 size 2 extends beyond EOD, truncated [ 1596.922106][T32063] serio: Serial port pts0 10:50:37 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1596.933777][T32062] serio: Serial port pts1 [ 1596.939398][T32051] loop3: p3 start 225 is beyond EOD, truncated [ 1596.945598][T32051] loop3: p4 size 2 extends beyond EOD, truncated [ 1596.952317][T32048] loop4: detected capacity change from 0 to 1 [ 1596.966466][T32051] loop3: p5 start 225 is beyond EOD, truncated [ 1597.031856][T32051] loop3: detected capacity change from 0 to 1 [ 1597.073225][T32051] loop3: p2 < > p3 p4 < p5 > [ 1597.078250][T32051] loop3: p2 size 2 extends beyond EOD, truncated [ 1597.095194][T32051] loop3: p3 start 225 is beyond EOD, truncated [ 1597.101444][T32051] loop3: p4 size 2 extends beyond EOD, truncated [ 1597.109740][T32051] loop3: p5 start 225 is beyond EOD, truncated [ 1597.158917][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1597.163958][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1597.170947][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1597.177213][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1597.183906][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:40 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000007a00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:40 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:40 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:40 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000060ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x800, 0x1, 0x0, "0000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)="5711972eb504cfc5859bbf7888a419bb204933c79407cb52", 0x18}, {&(0x7f0000000300)="749b43887157b27c4f18c215222efdeb569e2d093dec4afebd49afc6dd644c42a642e2758b31b48ad9b5d9e118df90467deda5dc37bf59c73c543327ed769eae7d68554aea4db2e721113b73f4da1afb5881770403ca2fa54f19ed1a8c656381b1725694b04246d3f7623381e8e7094b35650a8c05776ebe7f0998c4739f33f8020ebdaefc06cb7d2d1a17f9bad9e1fb15ff5e86f42a233ec011876f4a9b9f513570bb7c0d317538ac0b896ee8c81e0af7320bcddcaaca81016ceeecc4b8fbc8b591e43c8725ae74545f4c58f72fac53bb0e75c802215bda2e95b4f836404076628b", 0xe2}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4}, 0x810) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xd) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1599.914144][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1599.920836][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1599.923225][T32123] loop3: detected capacity change from 0 to 1 [ 1599.932713][T32128] serio: Serial port pts0 [ 1599.938758][T32126] loop4: detected capacity change from 0 to 1 [ 1599.950961][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1599.951583][T32130] serio: Serial port pts1 10:50:40 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1599.957278][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1599.972105][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1599.987489][T32123] loop3: p2 < > p3 p4 < p5 > [ 1599.992312][T32123] loop3: p2 size 2 extends beyond EOD, truncated [ 1600.005252][T32123] loop3: p3 start 225 is beyond EOD, truncated 10:50:40 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:40 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1600.011745][T32123] loop3: p4 size 2 extends beyond EOD, truncated [ 1600.021756][T32123] loop3: p5 start 225 is beyond EOD, truncated 10:50:40 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1600.066674][T32126] loop4: detected capacity change from 0 to 1 [ 1600.076251][T32123] loop3: detected capacity change from 0 to 1 [ 1600.103758][T32123] loop3: p2 < > p3 p4 < p5 > 10:50:40 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000ffffff9700024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x200000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0x11) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x16, 0x0, @thr={&(0x7f0000000300)="c22c36eeae1af0eff0057a09a598b22ab968234b164c5ec707ebad5c74943c46499a7ef43b3f4427c4b1eeca0727c17fed6aa6d42b7e48c8bd01a25cbe7f8142e0131cfd0eefbaab8f2db4e09e134029bfe177b5b51dbe9d3a558a156b7e0852e4b741e107fd8e2499b5970ff3d18bb1868f", &(0x7f00000005c0)="20c64a691e0fe706bcffec6c65dc2602592307a86438ad93ce30fb5caa1b938c1e05c38c4bad543ead6c0eb68fe5e3fa9e2a49e3f600c8f7461a2b06d3a8c2202cccf5a4bb94b29e46f197302cd95a7497f7e41e06a1759af74544e3c009b2f8b3cb19adcdc75a6fa62d4b9039b6dc68030622b4bedceeb701cd014402a585ed8ea7968c8c4354e09d0e"}}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e25, @broadcast}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x1fe) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r1, 0x5, 0x7, 0x5}) splice(0xffffffffffffffff, &(0x7f0000000140)=0xcb8, r4, &(0x7f00000001c0)=0x4, 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x1000000000013) [ 1600.115931][T32123] loop3: p2 size 2 extends beyond EOD, truncated 10:50:40 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:40 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000068ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1600.141246][T32123] loop3: p3 start 225 is beyond EOD, truncated [ 1600.147682][T32123] loop3: p4 size 2 extends beyond EOD, truncated [ 1600.155180][T32123] loop3: p5 start 225 is beyond EOD, truncated [ 1600.179666][T32178] loop4: detected capacity change from 0 to 1 [ 1600.265594][T32187] loop3: detected capacity change from 0 to 1 [ 1600.280462][T32178] loop4: detected capacity change from 0 to 1 [ 1600.297982][T32187] loop3: p2 < > p3 p4 < p5 > [ 1600.303183][T32187] loop3: p2 size 2 extends beyond EOD, truncated [ 1600.310297][T32187] loop3: p3 start 225 is beyond EOD, truncated [ 1600.316513][T32187] loop3: p4 size 2 extends beyond EOD, truncated [ 1600.323907][T32187] loop3: p5 start 225 is beyond EOD, truncated [ 1600.348168][T32187] loop3: detected capacity change from 0 to 1 [ 1600.387589][T32187] loop3: p2 < > p3 p4 < p5 > [ 1600.392639][T32187] loop3: p2 size 2 extends beyond EOD, truncated [ 1600.400574][T32187] loop3: p3 start 225 is beyond EOD, truncated [ 1600.406814][T32187] loop3: p4 size 2 extends beyond EOD, truncated [ 1600.414402][T32187] loop3: p5 start 225 is beyond EOD, truncated 10:50:43 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x1f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:43 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000ffffffaa00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:43 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00006cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1602.944740][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1602.949135][T32218] loop3: detected capacity change from 0 to 1 [ 1602.952599][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1602.961340][T32221] serio: Serial port pts1 [ 1602.970605][T32225] loop4: detected capacity change from 0 to 1 [ 1602.978070][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1602.984265][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:43 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:43 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1602.991380][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1602.998854][T32218] loop3: p2 < > p3 p4 < p5 > [ 1603.003761][T32218] loop3: p2 size 2 extends beyond EOD, truncated [ 1603.012039][T32218] loop3: p3 start 225 is beyond EOD, truncated [ 1603.018553][T32218] loop3: p4 size 2 extends beyond EOD, truncated [ 1603.028746][T32218] loop3: p5 start 225 is beyond EOD, truncated 10:50:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:43 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1603.083088][T32225] loop4: detected capacity change from 0 to 1 [ 1603.091822][T32218] loop3: detected capacity change from 0 to 1 10:50:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/ip_vs_stats\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:43 executing program 0: r0 = syz_io_uring_setup(0x1ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:43 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000074ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:43 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fa0ae1bc00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1603.162709][T32263] serio: Serial port pts0 [ 1603.202192][T32272] loop4: detected capacity change from 0 to 1 [ 1603.210176][T32273] loop3: detected capacity change from 0 to 1 [ 1603.250018][T32273] loop3: p2 < > p3 p4 < p5 > [ 1603.254886][T32273] loop3: p2 size 2 extends beyond EOD, truncated [ 1603.262749][T32273] loop3: p3 start 225 is beyond EOD, truncated [ 1603.269068][T32273] loop3: p4 size 2 extends beyond EOD, truncated [ 1603.277213][T32273] loop3: p5 start 225 is beyond EOD, truncated [ 1603.278948][T32272] loop4: detected capacity change from 0 to 1 [ 1603.331464][T32273] loop3: detected capacity change from 0 to 1 [ 1603.338829][T32274] serio: Serial port pts0 [ 1603.387743][T32273] loop3: p2 < > p3 p4 < p5 > [ 1603.394475][T32273] loop3: p2 size 2 extends beyond EOD, truncated [ 1603.402816][T32273] loop3: p3 start 225 is beyond EOD, truncated [ 1603.409150][T32273] loop3: p4 size 2 extends beyond EOD, truncated [ 1603.418305][T32273] loop3: p5 start 225 is beyond EOD, truncated [ 1603.509087][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1603.513871][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1603.521400][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1603.527619][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1603.534586][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:46 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:46 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000ffffffc900024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x2, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:46 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00007aff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1605.980003][T32319] loop4: detected capacity change from 0 to 1 [ 1605.981017][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1605.996150][T32324] serio: Serial port pts0 [ 1605.996319][T32326] loop3: detected capacity change from 0 to 1 [ 1606.001938][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1606.014752][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1606.021018][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1606.028111][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1606.037811][T32326] loop3: p2 < > p3 p4 < p5 > [ 1606.044024][T32326] loop3: p2 size 2 extends beyond EOD, truncated [ 1606.052531][T32326] loop3: p3 start 225 is beyond EOD, truncated [ 1606.058766][T32326] loop3: p4 size 2 extends beyond EOD, truncated [ 1606.068628][T32319] loop4: detected capacity change from 0 to 1 [ 1606.072458][T32343] serio: Serial port pts1 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:46 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:46 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fffffff600024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1606.085325][T32326] loop3: p5 start 225 is beyond EOD, truncated [ 1606.117923][T32326] loop3: detected capacity change from 0 to 1 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:46 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1606.162663][T32365] loop4: detected capacity change from 0 to 1 [ 1606.178341][T32326] loop3: p2 < > p3 p4 < p5 > [ 1606.183370][T32326] loop3: p2 size 2 extends beyond EOD, truncated [ 1606.192461][T32326] loop3: p3 start 225 is beyond EOD, truncated [ 1606.198958][T32326] loop3: p4 size 2 extends beyond EOD, truncated [ 1606.206166][T32326] loop3: p5 start 225 is beyond EOD, truncated 10:50:46 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1606.285743][T32365] loop4: detected capacity change from 0 to 1 10:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:49 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000480ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000bce10afa00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x80000001, 0x6, 0x1577, 0x6, "bf5a46bb3316940ec876300255ff8424b35789"}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.067899][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1609.074303][T32405] loop4: detected capacity change from 0 to 1 [ 1609.078317][T32401] loop3: detected capacity change from 0 to 1 [ 1609.081990][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1609.098479][T32411] serio: Serial port pts0 [ 1609.104130][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1609.110459][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1609.119307][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1609.129182][T32401] loop3: p2 < > p3 p4 < p5 > [ 1609.134334][T32401] loop3: p2 size 2 extends beyond EOD, truncated [ 1609.144832][T32401] loop3: p3 start 225 is beyond EOD, truncated [ 1609.145768][T32421] serio: Serial port pts1 [ 1609.151315][T32401] loop3: p4 size 2 extends beyond EOD, truncated 10:50:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.166404][T32401] loop3: p5 start 225 is beyond EOD, truncated [ 1609.177210][T32405] loop4: detected capacity change from 0 to 1 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fffffdfd00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.237215][T32401] loop3: detected capacity change from 0 to 1 [ 1609.299445][T32401] loop3: p2 < > p3 p4 < p5 > [ 1609.304601][T32401] loop3: p2 size 2 extends beyond EOD, truncated [ 1609.315917][T32401] loop3: p3 start 225 is beyond EOD, truncated [ 1609.322376][T32401] loop3: p4 size 2 extends beyond EOD, truncated [ 1609.336317][T32401] loop3: p5 start 225 is beyond EOD, truncated 10:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(0x0, 0x1000000000013) 10:50:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:49 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000090ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x8001, 0x6, 0x2, 0x7, 0x25, "da78edc003b3b081"}) getrlimit(0xf, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r4 = gettid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000001c0)={{r5, r6+60000000}, {0x77359400}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getpid() tkill(r4, 0x1000000000013) [ 1609.378977][T32463] loop4: detected capacity change from 0 to 1 [ 1609.389574][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1609.395590][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1609.415612][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1609.421911][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.423143][T32476] serio: Serial port pts0 [ 1609.429058][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1609.440134][T32475] serio: Serial port pts1 10:50:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fffffffd00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.523396][T32493] loop3: detected capacity change from 0 to 1 [ 1609.535321][T32496] loop4: detected capacity change from 0 to 1 10:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="03c60b00002507d08e04004e917724c0f8bc57ecd42c9adca1fe464888e461c324a2b349f8ae4e6d991be20644e87dbd53268d722beeca9d6b60f8fc979b7d818ce87b64c4992d6623c5fdf9cc72ed0b46892a3d860e0e30ffff8e8eb20bec8b209c016c73560d8fa9e96e5697922129f4511c6008"], 0xe8}}, 0x4000851) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r3, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) 10:50:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1609.567835][T32493] loop3: p2 < > p3 p4 < p5 > [ 1609.575466][T32493] loop3: p2 size 2 extends beyond EOD, truncated [ 1609.585197][T32493] loop3: p3 start 225 is beyond EOD, truncated [ 1609.591691][T32493] loop3: p4 size 2 extends beyond EOD, truncated [ 1609.602795][T32493] loop3: p5 start 225 is beyond EOD, truncated 10:50:49 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1609.620246][T32496] loop4: detected capacity change from 0 to 1 [ 1609.621128][T32509] serio: Serial port pts0 [ 1609.688169][T32493] loop3: detected capacity change from 0 to 1 10:50:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(0x0, 0x1000000000013) 10:50:50 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:50 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fffffffe00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:50 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffff0000, 0x341800) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x9e, 0x6, 0x4461c2e6, 0x10001, 0xb, "391852eae51e5ef3aac7e8b9ec255bc8a84df5"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) sendto$inet(0xffffffffffffffff, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x3110, 0xffffffffffffffff, 0x8577d000) 10:50:50 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000396ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1610.268965][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1610.273796][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1610.288157][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1610.289600][T32548] loop4: detected capacity change from 0 to 1 [ 1610.294398][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1610.295333][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x3, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1610.315327][T32552] loop3: detected capacity change from 0 to 1 10:50:50 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1610.350211][T32561] serio: Serial port pts0 [ 1610.358332][T32552] loop3: p2 < > p3 p4 < p5 > [ 1610.361238][T32566] serio: Serial port pts1 [ 1610.363386][T32552] loop3: p2 size 2 extends beyond EOD, truncated [ 1610.386864][T32548] loop4: detected capacity change from 0 to 1 [ 1610.392987][T32552] loop3: p3 start 225 is beyond EOD, truncated 10:50:50 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1610.393007][T32552] loop3: p4 size 2 extends beyond EOD, truncated [ 1610.393757][T32552] loop3: p5 start 225 is beyond EOD, truncated 10:50:50 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:50 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000fff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:50 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1610.489860][T32552] loop3: detected capacity change from 0 to 1 [ 1610.550983][T32552] loop3: p2 < > p3 p4 < p5 > [ 1610.555777][T32552] loop3: p2 size 2 extends beyond EOD, truncated [ 1610.566523][T32552] loop3: p3 start 225 is beyond EOD, truncated [ 1610.572876][T32552] loop3: p4 size 2 extends beyond EOD, truncated [ 1610.589722][T32607] loop4: detected capacity change from 0 to 1 [ 1610.590294][T32552] loop3: p5 start 225 is beyond EOD, truncated [ 1610.613417][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1610.618364][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1610.625449][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1610.631882][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1610.641407][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:50:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(0x0, 0x1000000000013) 10:50:51 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000140)={0x0, 0x16, 0x6, @thr={&(0x7f00000012c0)="2aea2bcdedb16e85071f435a1965d78855f3a246c0bdb6fac7dcda17ccca75a28e2d8459da571b3f06aad0b1380f9eddfe4c3e36bbfc9b8bfac96cd6bd644328ceb1", &(0x7f00000002c0)="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"}}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40000) 10:50:51 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:51 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000ffffefff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:51 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0000c0ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1611.198117][T32624] serio: Serial port pts0 [ 1611.204988][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1611.208254][T32630] loop4: detected capacity change from 0 to 1 [ 1611.210342][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1611.232272][T32635] loop3: detected capacity change from 0 to 1 [ 1611.232564][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:50:51 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1611.244600][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1611.252673][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1611.277551][T32635] loop3: p2 < > p3 p4 < p5 > [ 1611.277948][T32630] loop4: detected capacity change from 0 to 1 [ 1611.282897][T32635] loop3: p2 size 2 extends beyond EOD, truncated 10:50:51 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:51 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:51 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1611.305658][T32635] loop3: p3 start 225 is beyond EOD, truncated [ 1611.312227][T32635] loop3: p4 size 2 extends beyond EOD, truncated [ 1611.320189][T32652] serio: Serial port pts1 [ 1611.326767][T32635] loop3: p5 start 225 is beyond EOD, truncated 10:50:51 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000ffefffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:51 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1611.386499][T32635] loop3: detected capacity change from 0 to 1 [ 1611.428214][T32635] loop3: p2 < > p3 p4 < p5 > [ 1611.433416][T32635] loop3: p2 size 2 extends beyond EOD, truncated [ 1611.441980][T32635] loop3: p3 start 225 is beyond EOD, truncated [ 1611.449097][T32635] loop3: p4 size 2 extends beyond EOD, truncated [ 1611.458024][T32683] loop4: detected capacity change from 0 to 1 [ 1611.458110][T32635] loop3: p5 start 225 is beyond EOD, truncated [ 1611.481537][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1611.486638][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1611.493770][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1611.499989][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1611.507164][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1611.528191][T32683] loop4: detected capacity change from 0 to 1 10:50:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:52 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1612.145989][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1612.150994][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1612.156658][T32708] serio: Serial port pts1 [ 1612.162698][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1612.168916][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1612.176390][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, &(0x7f0000000140)={0x1a, 0x7, 0x2}) 10:50:54 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:54 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0000e1ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:54 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fdfdffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:50:54 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1614.214296][T32726] loop3: detected capacity change from 0 to 1 [ 1614.222059][T32727] loop4: detected capacity change from 0 to 1 [ 1614.228681][T32732] serio: Serial port pts0 10:50:54 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1614.261006][T32726] loop3: p2 < > p3 p4 < p5 > [ 1614.266240][T32726] loop3: p2 size 2 extends beyond EOD, truncated [ 1614.279393][T32726] loop3: p3 start 225 is beyond EOD, truncated [ 1614.285705][T32726] loop3: p4 size 2 extends beyond EOD, truncated [ 1614.293748][T32726] loop3: p5 start 225 is beyond EOD, truncated 10:50:54 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x2f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1614.309560][T32727] loop4: detected capacity change from 0 to 1 10:50:54 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000097ffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1614.351175][T32726] loop3: detected capacity change from 0 to 1 [ 1614.391766][ T301] loop4: detected capacity change from 0 to 1 [ 1614.409931][T32726] loop3: p2 < > p3 p4 < p5 > [ 1614.415673][T32726] loop3: p2 size 2 extends beyond EOD, truncated [ 1614.423603][T32726] loop3: p3 start 225 is beyond EOD, truncated [ 1614.429988][T32726] loop3: p4 size 2 extends beyond EOD, truncated [ 1614.436781][T32726] loop3: p5 start 225 is beyond EOD, truncated [ 1614.478539][ T301] loop4: detected capacity change from 0 to 1 10:50:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:55 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:50:55 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0003f0ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:55 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:55 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000aaffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1615.177141][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1615.182139][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1615.193565][ T326] loop4: detected capacity change from 0 to 1 [ 1615.198295][ T325] loop3: detected capacity change from 0 to 1 [ 1615.205890][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1615.212211][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1615.221170][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:50:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) r3 = dup(r1) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000140)={0x7017, 0x2, 0x0, 0x8, 0x1a, "c74ae07e98594385"}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1615.233723][ T329] serio: Serial port pts1 [ 1615.239651][ T325] loop3: p2 < > p3 p4 < p5 > [ 1615.244530][ T325] loop3: p2 size 2 extends beyond EOD, truncated [ 1615.266280][ T325] loop3: p3 start 225 is beyond EOD, truncated [ 1615.272632][ T325] loop3: p4 size 2 extends beyond EOD, truncated 10:50:55 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1615.284412][ T325] loop3: p5 start 225 is beyond EOD, truncated [ 1615.287650][ T350] serio: Serial port pts0 [ 1615.307948][ T326] loop4: detected capacity change from 0 to 1 10:50:55 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:55 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:55 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000c9ffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1615.332538][ T325] loop3: detected capacity change from 0 to 1 10:50:55 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1615.389551][ T325] loop3: p2 < > p3 p4 < p5 > [ 1615.395795][ T325] loop3: p2 size 2 extends beyond EOD, truncated [ 1615.408689][ T325] loop3: p3 start 225 is beyond EOD, truncated [ 1615.414912][ T325] loop3: p4 size 2 extends beyond EOD, truncated [ 1615.417430][ T375] loop4: detected capacity change from 0 to 1 [ 1615.425050][ T325] loop3: p5 start 225 is beyond EOD, truncated [ 1615.440961][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1615.446712][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1615.468343][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1615.474563][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1615.484350][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1615.508396][ T375] loop4: detected capacity change from 0 to 1 10:50:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:50:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0xc, 0x404d, 0x7f, 0x4, 0x8, 0x46, 0xd9, 0x2959c421}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:50:58 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0004f5ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:50:58 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:58 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:58 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000f6ffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1618.200610][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1618.206166][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1618.206444][ T407] loop4: detected capacity change from 0 to 1 [ 1618.213898][ T406] loop3: detected capacity change from 0 to 1 [ 1618.221319][ T408] serio: Serial port pts0 [ 1618.231887][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1618.238151][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1618.245434][ T413] serio: Serial port pts1 10:50:58 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1618.253083][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1618.277918][ T406] loop3: p2 < > p3 p4 < p5 > [ 1618.282842][ T406] loop3: p2 size 2 extends beyond EOD, truncated [ 1618.293899][ T406] loop3: p3 start 225 is beyond EOD, truncated 10:50:58 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:58 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:50:58 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1618.300541][ T406] loop3: p4 size 2 extends beyond EOD, truncated [ 1618.308396][ T406] loop3: p5 start 225 is beyond EOD, truncated [ 1618.341533][ T407] loop4: detected capacity change from 0 to 1 10:50:58 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:50:58 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000fdffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1618.388307][ T406] loop3: detected capacity change from 0 to 1 [ 1618.411084][ T430] serio: Serial port pts1 [ 1618.442228][ T406] loop3: p2 < > p3 p4 < p5 > [ 1618.447849][ T406] loop3: p2 size 2 extends beyond EOD, truncated [ 1618.457600][ T406] loop3: p3 start 225 is beyond EOD, truncated [ 1618.464018][ T406] loop3: p4 size 2 extends beyond EOD, truncated [ 1618.486751][ T406] loop3: p5 start 225 is beyond EOD, truncated [ 1618.493747][ T471] loop4: detected capacity change from 0 to 1 [ 1618.599152][ T471] loop4: detected capacity change from 0 to 1 10:51:01 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:01 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb}, 0x404) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:01 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000fffff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x24, 0x0, 0x1f, 0x3232, 0x9fd9, 0x100000000, 0x6, 0x7fff}, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) fcntl$setown(r3, 0x8, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:01 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000feffffff00024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1621.221584][ T494] loop3: detected capacity change from 0 to 1 [ 1621.221699][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1621.233335][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1621.241893][ T502] serio: Serial port pts0 [ 1621.247027][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1621.253214][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1621.262099][ T507] loop4: detected capacity change from 0 to 1 10:51:01 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1621.268790][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1621.270144][ T494] loop3: p2 < > p3 p4 < p5 > [ 1621.284902][ T494] loop3: p2 size 2 extends beyond EOD, truncated [ 1621.292927][ T494] loop3: p3 start 225 is beyond EOD, truncated [ 1621.299258][ T494] loop3: p4 size 2 extends beyond EOD, truncated [ 1621.313587][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:01 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:01 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:51:01 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1621.314447][ T494] loop3: p5 start 225 is beyond EOD, truncated [ 1621.318872][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1621.347507][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1621.353733][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1621.361812][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1621.389414][ T507] loop4: detected capacity change from 0 to 1 [ 1621.413124][ T494] loop3: detected capacity change from 0 to 1 [ 1621.419902][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1621.425395][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1621.432907][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:51:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x1}, &(0x7f0000000100)) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x1, 0x1000, 0x0, 0xec16, 0x6, "1952cafcc6278e8e13614ab28355aaf3451357"}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x7f, 0x10001, 0x8, 0x506, 0x19, "71ecc6df4a794cb69dde597598b2110e320220"}) tkill(r3, 0x1000000000013) 10:51:01 executing program 0: syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1621.439188][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1621.452218][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1621.472530][ T553] serio: Serial port pts0 10:51:01 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000002000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1621.493244][ T494] loop3: p2 < > p3 p4 < p5 > [ 1621.498631][ T494] loop3: p2 size 2 extends beyond EOD, truncated [ 1621.510956][ T494] loop3: p3 start 225 is beyond EOD, truncated [ 1621.517201][ T494] loop3: p4 size 2 extends beyond EOD, truncated [ 1621.531157][ T564] loop4: detected capacity change from 0 to 1 10:51:01 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000002ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:01 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:01 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000003000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1621.555646][ T494] loop3: p5 start 225 is beyond EOD, truncated 10:51:01 executing program 0: syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:51:01 executing program 0: syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:51:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:01 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1621.665126][ T595] loop3: detected capacity change from 0 to 1 [ 1621.676240][ T588] loop4: detected capacity change from 0 to 1 [ 1621.700515][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:01 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1621.713840][ T595] loop3: p2 < > p3 p4 < p5 > [ 1621.714363][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1621.724603][ T595] loop3: p2 size 2 extends beyond EOD, truncated [ 1621.731750][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1621.733540][ T595] loop3: p3 start 225 is beyond EOD, truncated [ 1621.737980][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1621.744317][ T595] loop3: p4 size 2 extends beyond EOD, truncated [ 1621.757623][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1621.764225][ T595] loop3: p5 start 225 is beyond EOD, truncated [ 1621.788849][ T588] loop4: detected capacity change from 0 to 1 [ 1621.806263][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1621.811308][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1621.818339][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1621.824882][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1621.832052][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1621.841934][ T595] loop3: detected capacity change from 0 to 1 [ 1621.899531][ T595] loop3: p2 < > p3 p4 < p5 > [ 1621.904563][ T595] loop3: p2 size 2 extends beyond EOD, truncated [ 1621.912301][ T595] loop3: p3 start 225 is beyond EOD, truncated [ 1621.918903][ T595] loop3: p4 size 2 extends beyond EOD, truncated [ 1621.925657][ T595] loop3: p5 start 225 is beyond EOD, truncated [ 1621.998604][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1622.003506][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1622.010507][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1622.016691][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1622.023615][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x402000) tkill(r2, 0x1000000000013) 10:51:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:04 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000004000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0x7ff, 0x4, 0x7, 0x7, 0x4, "a92490fb87fb9b98"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) sched_setattr(r3, &(0x7f0000000140)={0x38, 0x6, 0x1, 0x40, 0x2, 0x20, 0x40, 0x1, 0x0, 0x3}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x11) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:04 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000003ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x402000) tkill(r2, 0x1000000000013) [ 1624.482647][ T655] loop3: detected capacity change from 0 to 1 [ 1624.485483][ T658] loop4: detected capacity change from 0 to 1 [ 1624.508529][ T663] serio: Serial port pts0 [ 1624.523461][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:04 executing program 0: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1003}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x102}}, 0x404) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x402000) tkill(r2, 0x1000000000013) 10:51:04 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000005000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1624.528450][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1624.535659][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1624.541921][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1624.557663][ T655] loop3: p2 < > p3 p4 < p5 > [ 1624.559964][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1624.566379][ T655] loop3: p2 size 2 extends beyond EOD, truncated [ 1624.596839][ T655] loop3: p3 start 225 is beyond EOD, truncated [ 1624.603239][ T655] loop3: p4 size 2 extends beyond EOD, truncated [ 1624.627101][ T655] loop3: p5 start 225 is beyond EOD, truncated [ 1624.627567][ T686] loop4: detected capacity change from 0 to 1 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x0, 0x1, 0x16, 0xfffffffffffffff7, r3}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) prlimit64(r3, 0xb, &(0x7f0000000340)={0x7fffffff, 0x6}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000002c0)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:51:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x80000001, 0x6, 0x1577, 0x6, "bf5a46bb3316940ec876300255ff8424b35789"}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) [ 1624.645666][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1624.658830][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1624.666320][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1624.672636][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1624.685075][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1624.688661][ T701] serio: Serial port pts0 10:51:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1624.692732][ T699] serio: Serial port pts1 [ 1624.715805][ T655] loop3: detected capacity change from 0 to 1 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1624.748416][ T655] loop3: p2 < > p3 p4 < p5 > [ 1624.753225][ T655] loop3: p2 size 2 extends beyond EOD, truncated [ 1624.765193][ T655] loop3: p3 start 225 is beyond EOD, truncated [ 1624.771442][ T655] loop3: p4 size 2 extends beyond EOD, truncated [ 1624.777242][ T686] loop4: detected capacity change from 0 to 1 [ 1624.780186][ T655] loop3: p5 start 225 is beyond EOD, truncated 10:51:05 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000004ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000006000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x0, 0x1, 0x16, 0xfffffffffffffff7, r3}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) prlimit64(r3, 0xb, &(0x7f0000000340)={0x7fffffff, 0x6}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000002c0)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) [ 1624.894347][ T751] loop4: detected capacity change from 0 to 1 10:51:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) [ 1624.937711][ T766] loop3: detected capacity change from 0 to 1 [ 1624.945591][ T764] serio: Serial port pts0 [ 1624.968323][ T778] serio: Serial port pts1 10:51:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) [ 1624.987751][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1624.992874][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.000961][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1625.001386][ T751] loop4: detected capacity change from 0 to 1 [ 1625.007365][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.022146][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1625.030574][ T766] loop3: p2 < > p3 p4 < p5 > [ 1625.045075][ T766] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.059390][ T796] serio: Serial port pts2 [ 1625.061068][ T766] loop3: p3 start 225 is beyond EOD, truncated [ 1625.070151][ T766] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.077732][ T766] loop3: p5 start 225 is beyond EOD, truncated 10:51:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000007000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x10000010, 0x5, 0xb855, 0x778d8636, 0xf4f, 0x1, 0x2, 0x3ff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1625.102924][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1625.110470][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1625.119454][ T766] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1625.125486][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1625.132951][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1625.136702][ T766] loop3: detected capacity change from 0 to 1 [ 1625.140951][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1625.173854][ T817] serio: Serial port pts0 [ 1625.180310][ T766] loop3: p2 < > p3 p4 < p5 > [ 1625.185357][ T766] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.195893][ T766] loop3: p3 start 225 is beyond EOD, truncated [ 1625.202224][ T766] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.208448][ T826] loop4: detected capacity change from 0 to 1 [ 1625.210504][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:05 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000005ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1625.218737][ T766] loop3: p5 start 225 is beyond EOD, truncated [ 1625.220089][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1625.232880][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1625.239103][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1625.246322][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) [ 1625.278711][ T826] loop4: detected capacity change from 0 to 1 [ 1625.298814][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1625.303976][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.313269][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1625.319536][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:51:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000008000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x1ff}, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x86000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000001c0)={'bond0\x00', {0x2, 0x0, @multicast2}}) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) r5 = getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x13, 0x4, @tid=r5}, &(0x7f0000000100)) r6 = gettid() r7 = getpgid(r0) tkill(r7, 0xb) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000013) [ 1625.322242][ T854] serio: Serial port pts2 [ 1625.327859][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1625.385138][ T866] loop4: detected capacity change from 0 to 1 [ 1625.388575][ T861] loop3: detected capacity change from 0 to 1 [ 1625.457607][ T861] loop3: p2 < > p3 p4 < p5 > [ 1625.463286][ T861] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.463924][ T866] loop4: detected capacity change from 0 to 1 [ 1625.471663][ T861] loop3: p3 start 225 is beyond EOD, truncated [ 1625.482169][ T861] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.490252][ T861] loop3: p5 start 225 is beyond EOD, truncated [ 1625.552267][ T861] loop3: detected capacity change from 0 to 1 [ 1625.570570][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1625.576152][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1625.583688][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1625.589946][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1625.597042][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1625.610566][ T861] loop3: p2 < > p3 p4 < p5 > [ 1625.615376][ T861] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.622723][ T861] loop3: p3 start 225 is beyond EOD, truncated [ 1625.628987][ T861] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.635914][ T861] loop3: p5 start 225 is beyond EOD, truncated [ 1625.659311][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1625.664184][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1625.671290][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1625.677678][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1625.684303][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x0, 0x1, 0x16, 0xfffffffffffffff7, r3}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) prlimit64(r3, 0xb, &(0x7f0000000340)={0x7fffffff, 0x6}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000002c0)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:51:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3bf7e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8204, 0x20c49a, 0x0, 0x27) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x2, 0x18, 0x1, 0x3, 0x2, 0xffffffff, 0xffff, 0x800, 0x642e}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) 10:51:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000009000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:06 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000006ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1625.866384][ T929] loop4: detected capacity change from 0 to 1 [ 1625.871006][ T930] loop3: detected capacity change from 0 to 1 [ 1625.879626][ T928] serio: Serial port pts0 [ 1625.891437][ T937] serio: Serial port pts1 [ 1625.892425][ T931] serio: Serial port pts2 10:51:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000a000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x3f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1625.923894][ T930] loop3: p2 < > p3 p4 < p5 > [ 1625.928763][ T930] loop3: p2 size 2 extends beyond EOD, truncated [ 1625.935795][ T930] loop3: p3 start 225 is beyond EOD, truncated [ 1625.942212][ T930] loop3: p4 size 2 extends beyond EOD, truncated [ 1625.949682][ T930] loop3: p5 start 225 is beyond EOD, truncated 10:51:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000b000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1625.987974][ T950] loop4: detected capacity change from 0 to 1 [ 1626.004056][ T930] loop3: detected capacity change from 0 to 1 [ 1626.048132][ T930] loop3: p2 < > p3 p4 < p5 > [ 1626.054551][ T930] loop3: p2 size 2 extends beyond EOD, truncated [ 1626.061936][ T930] loop3: p3 start 225 is beyond EOD, truncated [ 1626.068308][ T930] loop3: p4 size 2 extends beyond EOD, truncated [ 1626.077066][ T930] loop3: p5 start 225 is beyond EOD, truncated 10:51:06 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000007ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:06 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1626.094576][ T972] loop4: detected capacity change from 0 to 1 10:51:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:06 executing program 0: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000004ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:06 executing program 0: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000004ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1626.142289][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1626.147259][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1626.152466][ T986] serio: Serial port pts0 [ 1626.158589][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1626.164968][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1626.172746][ T984] loop3: detected capacity change from 0 to 1 [ 1626.181396][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1626.220571][ T984] loop3: p2 < > p3 p4 < p5 > [ 1626.228396][ T972] loop4: detected capacity change from 0 to 1 [ 1626.237859][ T984] loop3: p2 size 2 extends beyond EOD, truncated [ 1626.258490][ T984] loop3: p3 start 225 is beyond EOD, truncated [ 1626.264730][ T984] loop3: p4 size 2 extends beyond EOD, truncated [ 1626.273408][ T984] loop3: p5 start 225 is beyond EOD, truncated [ 1626.415648][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1626.420626][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1626.427880][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1626.434125][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1626.441392][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:09 executing program 1: getpgid(0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xd, &(0x7f0000000140)={0x6, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:09 executing program 0: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000004ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:09 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000008ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000c000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3bf7e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8204, 0x20c49a, 0x0, 0x27) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x2, 0x18, 0x1, 0x3, 0x2, 0xffffffff, 0xffff, 0x800, 0x642e}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) [ 1628.882991][ T1035] loop3: detected capacity change from 0 to 1 [ 1628.887513][ T1036] loop4: detected capacity change from 0 to 1 [ 1628.898060][ T1037] serio: Serial port pts0 [ 1628.909548][ T1039] serio: Serial port pts1 [ 1628.931415][ T1051] serio: Serial port pts2 10:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1628.954299][ T1035] loop3: p2 < > p3 p4 < p5 > 10:51:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000d000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1628.977818][ T1036] loop4: detected capacity change from 0 to 1 [ 1628.978675][ T1035] loop3: p2 size 2 extends beyond EOD, truncated [ 1628.999631][ T1035] loop3: p3 start 225 is beyond EOD, truncated [ 1629.005941][ T1035] loop3: p4 size 2 extends beyond EOD, truncated [ 1629.013750][ T1035] loop3: p5 start 225 is beyond EOD, truncated 10:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0xcda}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x40000080000001}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @thr={&(0x7f0000000140)="aaa14cd8f88cb54ec689e8b595ac98d2e53dc9e8087dd72bcca4ae78fd962b5abab4e1761b299129e4cee9b3240fbae627250587fea368a970cb60ee25f78efaea50f46c09edb4c70a7f8262f3f7d01a7668576cf857b56435747d80d8fda68f5c7468", &(0x7f00000001c0)="d5c9ec8acb3d70f34ad1a3b1f7760a14a432b6e6c20e15dc"}}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1629.060212][ T1035] loop3: detected capacity change from 0 to 1 10:51:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) tkill(r2, 0x1000000000013) 10:51:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:09 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000009ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:09 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x4, 0x7) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0x40000000, &(0x7f00000002c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xfffffffa, 0x0, 0x0, 0x0, 0x4, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x1}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x20000000, 0xdb, 0xf4b7, 0x5, 0x1ff, 0x804, 0x5, 0x36}, 0x0) [ 1629.152566][ T1089] loop4: detected capacity change from 0 to 1 [ 1629.154136][ T1088] serio: Serial port pts0 10:51:09 executing program 1: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x6, 0x80, 0x9, 0xbfb4, 0x13, "f482fb56365758269bf860e8f56184bc1246d7"}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)=0x0) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000000)={{}, {r5, r6+60000000}}, 0x0) tkill(r4, 0x1000000000013) 10:51:09 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1629.223142][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1629.223592][ T1106] loop3: detected capacity change from 0 to 1 [ 1629.230196][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1629.248442][ T1089] loop4: detected capacity change from 0 to 1 [ 1629.260908][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1629.267712][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1629.270750][ T1106] loop3: p2 < > p3 p4 < p5 > [ 1629.280556][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1629.284378][ T1106] loop3: p2 size 2 extends beyond EOD, truncated [ 1629.288494][ T1117] serio: Serial port pts1 [ 1629.305642][ T1106] loop3: p3 start 225 is beyond EOD, truncated [ 1629.311901][ T1106] loop3: p4 size 2 extends beyond EOD, truncated [ 1629.320547][ T1106] loop3: p5 start 225 is beyond EOD, truncated [ 1629.360975][ T1106] loop3: detected capacity change from 0 to 1 [ 1629.409586][ T1106] loop3: p2 < > p3 p4 < p5 > [ 1629.414433][ T1106] loop3: p2 size 2 extends beyond EOD, truncated [ 1629.422145][ T1106] loop3: p3 start 225 is beyond EOD, truncated [ 1629.428391][ T1106] loop3: p4 size 2 extends beyond EOD, truncated [ 1629.438628][ T1106] loop3: p5 start 225 is beyond EOD, truncated [ 1629.478434][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1629.483559][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1629.491269][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1629.497746][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1629.504844][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000300)=0x20) 10:51:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000e000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:12 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000aff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:12 executing program 0: futex(&(0x7f00000000c0), 0x84, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 0: getresuid(&(0x7f0000006680), &(0x7f00000066c0), &(0x7f0000006700)) getresuid(&(0x7f00000110c0), &(0x7f0000011100), &(0x7f0000011140)) [ 1631.951987][ T1164] loop3: detected capacity change from 0 to 1 [ 1631.959005][ T1166] loop4: detected capacity change from 0 to 1 [ 1631.969378][ T1165] serio: Serial port pts0 10:51:12 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_delete(0x0) 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1632.026279][ T1164] loop3: p2 < > p3 p4 < p5 > [ 1632.034075][ T1164] loop3: p2 size 2 extends beyond EOD, truncated [ 1632.058066][ T1164] loop3: p3 start 225 is beyond EOD, truncated [ 1632.064313][ T1164] loop3: p4 size 2 extends beyond EOD, truncated 10:51:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@remote, 0x10001}) [ 1632.079345][ T1166] loop4: detected capacity change from 0 to 1 [ 1632.088616][ T1164] loop3: p5 start 225 is beyond EOD, truncated [ 1632.148699][ T1164] loop3: detected capacity change from 0 to 1 [ 1632.203295][ T1164] loop3: p2 < > p3 p4 < p5 > [ 1632.213841][ T1164] loop3: p2 size 2 extends beyond EOD, truncated [ 1632.228616][ T1164] loop3: p3 start 225 is beyond EOD, truncated [ 1632.234820][ T1164] loop3: p4 size 2 extends beyond EOD, truncated [ 1632.242411][ T1164] loop3: p5 start 225 is beyond EOD, truncated [ 1632.243949][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(r1, 0x400040) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:12 executing program 0: syslog(0x2, &(0x7f0000000000)=""/137, 0x89) 10:51:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000f000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1632.253720][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1632.261327][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1632.267592][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:12 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000bff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1632.293912][ T1220] serio: Serial port pts0 [ 1632.302493][ T1222] loop4: detected capacity change from 0 to 1 [ 1632.305702][ T1225] serio: Serial port pts1 [ 1632.314085][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1632.373049][ T1242] loop3: detected capacity change from 0 to 1 [ 1632.388837][ T1222] loop4: detected capacity change from 0 to 1 [ 1632.412138][ T1242] loop3: p2 < > p3 p4 < p5 > [ 1632.417172][ T1242] loop3: p2 size 2 extends beyond EOD, truncated 10:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x5) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x442000, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000180)={0x8, 0x3, 0x4, 0x8, 0x17, "b6acf42b0e9721ce"}) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) ptrace$cont(0x29, 0xffffffffffffffff, 0x8, 0x9) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000200)}, {&(0x7f0000000380)=""/66, 0x42}], 0x3, 0x2, 0x101) [ 1632.425042][ T1242] loop3: p3 start 225 is beyond EOD, truncated [ 1632.431813][ T1242] loop3: p4 size 2 extends beyond EOD, truncated [ 1632.442222][ T1242] loop3: p5 start 225 is beyond EOD, truncated 10:51:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000010000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) rt_tgsigqueueinfo(r1, r0, 0x37, &(0x7f0000000180)={0x22, 0x7fffffff, 0x730}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x808000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1632.492627][ T1242] loop3: detected capacity change from 0 to 1 [ 1632.548152][ T1242] loop3: p2 < > p3 p4 < p5 > [ 1632.553015][ T1242] loop3: p2 size 2 extends beyond EOD, truncated [ 1632.562630][ T1242] loop3: p3 start 225 is beyond EOD, truncated [ 1632.563138][ T1283] serio: Serial port pts0 [ 1632.569371][ T1242] loop3: p4 size 2 extends beyond EOD, truncated [ 1632.581320][ T1276] loop4: detected capacity change from 0 to 1 [ 1632.584168][ T1242] loop3: p5 start 225 is beyond EOD, truncated 10:51:12 executing program 0: syslog(0x2, &(0x7f0000000000)=""/137, 0x89) 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1632.597990][ T1289] serio: Serial port pts1 10:51:12 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:12 executing program 0: syslog(0x2, &(0x7f0000000000)=""/137, 0x89) [ 1632.655936][ T1276] loop4: detected capacity change from 0 to 1 [ 1632.671715][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1632.677804][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1632.686348][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1632.692589][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1632.700009][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:12 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0xfffffffd, 0x4d790e9c, 0x0, 0xa, "000000ed00002f000076000000000900"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000011000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1632.727053][ T1322] loop3: detected capacity change from 0 to 1 10:51:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x8, 0x4000007ffffffd, 0xfffffffffffffffc}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0xfffffffc, 0x0, 0x100, 0x0, 0x0, "0000000000cdc1517600000000000000e800"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x10000002) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0x80000000, 0xfffffff8, 0x4000101, 0x3, 0x19, "b08006ea00d724df2b77d1d06508837bbeae7e"}) open(&(0x7f0000000180)='./file0\x00', 0x401000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xa) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x24, 0x6, 0x7f, 0x81, 0xfffffffffffffc00, 0x3ff, 0x8, 0x10000}, 0x0) 10:51:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1632.777509][ T1322] loop3: p2 < > p3 p4 < p5 > [ 1632.782560][ T1322] loop3: p2 size 2 extends beyond EOD, truncated [ 1632.798289][ T1322] loop3: p3 start 225 is beyond EOD, truncated [ 1632.804541][ T1322] loop3: p4 size 2 extends beyond EOD, truncated [ 1632.820991][ T1341] loop4: detected capacity change from 0 to 1 10:51:13 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:13 executing program 0: syslog(0x2, &(0x7f0000000000)=""/137, 0x89) [ 1632.846933][ T1322] loop3: p5 start 225 is beyond EOD, truncated [ 1632.857660][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1632.865753][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1632.885110][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1632.889815][ T1359] serio: Serial port pts1 10:51:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x2b40, 0x0) read(r4, &(0x7f00000002c0)=""/72, 0x48) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) 10:51:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x9, &(0x7f0000000080)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev}, @GTPA_I_TEI={0x8}, @GTPA_FLOW, @GTPA_I_TEI, @GTPA_FLOW, @GTPA_LINK, @GTPA_LINK, @GTPA_NET_NS_FD, @GTPA_FLOW, @GTPA_MS_ADDRESS={0x0, 0x5, @empty}]}, 0x24}}, 0x0) [ 1632.891418][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1632.904424][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1632.922385][ T1365] serio: Serial port pts0 10:51:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1632.948435][ T1341] loop4: detected capacity change from 0 to 1 [ 1632.962983][ T1322] loop3: detected capacity change from 0 to 1 10:51:13 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000dff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 10:51:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000012000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1633.025475][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1633.030930][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1633.039483][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1633.043310][ T1393] loop3: detected capacity change from 0 to 1 [ 1633.045764][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1633.063227][ T1401] loop4: detected capacity change from 0 to 1 10:51:13 executing program 0: getresuid(&(0x7f0000006680), &(0x7f00000066c0), &(0x7f0000006700)) 10:51:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x4f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1633.070358][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:13 executing program 0: openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x408000, 0x379d0dd351b5f236) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1, 0x0, 0x9) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x11) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000840)="16884896426f2eead5b120e784fbc47c08d686b142c814c72f0edace1bafc2d7cc177b8acdc0cd7ab2f5095463b2d81c069bbedff5d5e10ac280dc6616394b40fdfe09d122b6a5397b545c", 0x4b}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24002da8) fcntl$setsig(0xffffffffffffffff, 0xa, 0xb) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x88010) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1b, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f412287b88d52644d882c5", [0xffff8001]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x5, 0x2fb8000000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 10:51:13 executing program 1: prlimit64(0x0, 0xb, &(0x7f0000000140)={0xd, 0x2000001ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x2, 0x1, 0x0, 0x2, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x4e0200) r3 = socket(0x10, 0x802, 0x0) sendto$inet(r3, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(r3, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) fsync(r3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1e, 0x3, @tid=r0}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1633.108499][ T1393] loop3: p2 < > p3 p4 < p5 > [ 1633.113887][ T1393] loop3: p2 size 2 extends beyond EOD, truncated [ 1633.133349][ T1401] loop4: detected capacity change from 0 to 1 [ 1633.152528][ T1393] loop3: p3 start 225 is beyond EOD, truncated 10:51:13 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xfe, 0x9, 0x0, 0x20, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffff800, 0x6}, 0x5480, 0x23, 0x68b3, 0x4, 0x7, 0x9, 0xbdf9, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e141, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x401ffc000) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x36) syz_genetlink_get_family_id$devlink(0x0, r0) sendfile(r2, r3, 0x0, 0x401ffc000) prlimit64(0x0, 0xa, &(0x7f0000001d80)={0x1d, 0x9}, 0x0) getpid() 10:51:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000022000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1633.158844][ T1393] loop3: p4 size 2 extends beyond EOD, truncated [ 1633.176420][ T1393] loop3: p5 start 225 is beyond EOD, truncated [ 1633.182249][ T1428] serio: Serial port pts1 10:51:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1633.214230][ T1393] loop3: detected capacity change from 0 to 1 [ 1633.242949][ T1393] loop3: p2 < > p3 p4 < p5 > [ 1633.247939][ T1393] loop3: p2 size 2 extends beyond EOD, truncated [ 1633.256949][ T1393] loop3: p3 start 225 is beyond EOD, truncated [ 1633.263457][ T1393] loop3: p4 size 2 extends beyond EOD, truncated [ 1633.271119][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1633.276020][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1633.284414][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1633.290772][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1633.305957][ T1451] loop4: detected capacity change from 0 to 1 10:51:13 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000eff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1633.312901][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1633.319251][ T1393] loop3: p5 start 225 is beyond EOD, truncated 10:51:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={0x0}}, 0x0) 10:51:13 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1633.407639][ T1451] loop4: detected capacity change from 0 to 1 [ 1633.429109][ T1471] loop3: detected capacity change from 0 to 1 10:51:13 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000025000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1633.464633][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1633.470151][ T1476] serio: Serial port pts1 [ 1633.471132][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1633.485126][ T1471] loop3: p2 < > p3 p4 < p5 > [ 1633.490145][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1633.490788][ T1471] loop3: p2 size 2 extends beyond EOD, truncated [ 1633.496508][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:13 executing program 0: openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x408000, 0x379d0dd351b5f236) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1, 0x0, 0x9) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, 0x0, 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) fcntl$setsig(0xffffffffffffffff, 0xa, 0xb) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x88010) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1b, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f412287b88d52644d882c5", [0xffff8001]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x2fb8000000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 10:51:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1633.504198][ T1471] loop3: p3 start 225 is beyond EOD, truncated [ 1633.515443][ T1471] loop3: p4 size 2 extends beyond EOD, truncated [ 1633.518698][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1633.529473][ T1489] loop4: detected capacity change from 0 to 1 [ 1633.536155][ T1471] loop3: p5 start 225 is beyond EOD, truncated [ 1633.585455][ T1471] loop3: detected capacity change from 0 to 1 [ 1633.620659][ T1471] loop3: p2 < > p3 p4 < p5 > [ 1633.626207][ T1471] loop3: p2 size 2 extends beyond EOD, truncated [ 1633.634146][ T1471] loop3: p3 start 225 is beyond EOD, truncated [ 1633.640460][ T1471] loop3: p4 size 2 extends beyond EOD, truncated [ 1633.650934][ T1471] loop3: p5 start 225 is beyond EOD, truncated [ 1633.738335][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1633.743426][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1633.750647][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1633.756952][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1633.763993][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1633.817086][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1633.821935][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1633.829729][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1633.835937][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1633.843324][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="c252173eab990cccba2ec87f0ebcc88723f33bff7c72f400c58a6a9750997ae90dd03a98ff53834d35f2fbae441adc7269264d43f1fc3c7866880c94b1c36f5306d2f1a772e37e73d76cc6579898b77c4fc9dce1f341da2a5ae3296b8cb81065393fa2fc9cbf8d2b5b62138035d2f7a16d55d1872815d449ac7dc319b80ae5af701d99d3ad8d78fbd72da9a3de5027a1c6c1edd586e6301769e19e42c78e6d436729fd090abffbf7d746e0ea69e0c78e272779f1082673b8ee0874488c89193c1005cdff5e055c9ba2636fb1fc06438c6c6c1207559969566c7d00dbf1d03cfaf36c") timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000048000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:16 executing program 0: msgsnd(0x0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 10:51:16 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00000fff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:16 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1636.149284][ T1530] serio: Serial port pts0 10:51:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000009c0)='n', 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:51:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040), 0x4) 10:51:16 executing program 0: socketpair(0x11, 0xa, 0xfffffffa, &(0x7f0000000000)) [ 1636.171044][ T1538] loop4: detected capacity change from 0 to 1 [ 1636.174142][ T1537] loop3: detected capacity change from 0 to 1 [ 1636.192469][ T1544] serio: Serial port pts1 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1636.250894][ T1537] loop3: p2 < > p3 p4 < p5 > [ 1636.264848][ T1538] loop4: detected capacity change from 0 to 1 [ 1636.267625][ T1537] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.289842][ T1537] loop3: p3 start 225 is beyond EOD, truncated 10:51:16 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @multicast}, 0x0, {0x2, 0x0, @loopback}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x2, 'rr\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 10:51:16 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f0000001a80)) [ 1636.296069][ T1537] loop3: p4 size 2 extends beyond EOD, truncated [ 1636.319768][ T1537] loop3: p5 start 225 is beyond EOD, truncated [ 1636.364624][ T1537] loop3: detected capacity change from 0 to 1 [ 1636.402689][ T1537] loop3: p2 < > p3 p4 < p5 > 10:51:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000c80)) 10:51:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000004c000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:16 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x9, 0x0, 0x4, 0x0, 0x2, "00000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1636.413529][ T1537] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.420879][ T1537] loop3: p3 start 225 is beyond EOD, truncated [ 1636.427104][ T1537] loop3: p4 size 2 extends beyond EOD, truncated [ 1636.434890][ T1537] loop3: p5 start 225 is beyond EOD, truncated [ 1636.457728][ T1595] loop4: detected capacity change from 0 to 1 10:51:16 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000010ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:16 executing program 1: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x2a2, @time={0x0, 0x6a}, 0x20, {0x1, 0x4}, 0x81, 0x1, 0x81}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008c00)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2100) [ 1636.468571][ T1598] serio: Serial port pts0 [ 1636.505950][ T1606] serio: Serial port pts1 [ 1636.519083][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1636.524028][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.531939][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1636.533944][ T1595] loop4: detected capacity change from 0 to 1 [ 1636.538185][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1636.539454][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000068000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1636.627102][ T1622] loop3: detected capacity change from 0 to 1 [ 1636.642899][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1636.647495][ T1640] loop4: detected capacity change from 0 to 1 [ 1636.647949][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1636.661982][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1636.668359][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() clone3(&(0x7f0000001380)={0x100, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f00000002c0), {0x17}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/48, &(0x7f0000001340)=[r0], 0x1}, 0x58) prlimit64(r1, 0xf, &(0x7f0000001400)={0x2, 0x1}, &(0x7f0000001440)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x6, 0x1d, 0x6, 0x80000000, 0x7e1d80000000, 0x59f1, 0x0, 0xe2ff0bb, 0x7}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1636.675415][ T1622] loop3: p2 < > p3 p4 < p5 > [ 1636.688298][ T1640] loop4: detected capacity change from 0 to 1 [ 1636.702916][ T1622] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.712406][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1636.720149][ T1622] loop3: p3 start 225 is beyond EOD, truncated 10:51:16 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1636.726481][ T1622] loop3: p4 size 2 extends beyond EOD, truncated [ 1636.738322][ T1622] loop3: p5 start 225 is beyond EOD, truncated [ 1636.759637][ T1665] serio: Serial port pts0 [ 1636.769394][ T1669] serio: Serial port pts1 10:51:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000006c000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1636.799609][ T1622] loop3: detected capacity change from 0 to 1 [ 1636.810297][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1636.815391][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1636.824040][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1636.830281][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1636.832240][ T1622] loop3: p2 < > p3 p4 < p5 > [ 1636.838806][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1636.852464][ T1622] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.859630][ T1695] loop4: detected capacity change from 0 to 1 [ 1636.867049][ T1622] loop3: p3 start 225 is beyond EOD, truncated [ 1636.873381][ T1622] loop3: p4 size 2 extends beyond EOD, truncated [ 1636.880732][ T1622] loop3: p5 start 225 is beyond EOD, truncated 10:51:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x80000000, 0x3, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x14, 0xfffffff7, 0x7, 0x5, 0x7f, 0x3, 0xfffffff8, 0x7ed}, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x800004) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) timer_create(0x1, &(0x7f0000000140)={0x0, 0x24}, &(0x7f0000000180)) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x8, 0xfff, 0x9, 0x8, 0x17, "de6039eb98a71c2178b54fcb2deabeaff6beed"}) 10:51:17 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000011ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1636.946338][ T1695] loop4: detected capacity change from 0 to 1 [ 1636.960691][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1636.966765][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1636.977647][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1636.984007][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:51:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1636.997826][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1637.022789][ T1729] serio: Serial port pts1 [ 1637.057076][ T1731] loop3: detected capacity change from 0 to 1 [ 1637.097425][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1637.102537][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.110378][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1637.116571][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1637.123341][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1637.131447][ T1731] loop3: p2 < > p3 p4 < p5 > [ 1637.136458][ T1731] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.143401][ T1731] loop3: p3 start 225 is beyond EOD, truncated [ 1637.150054][ T1731] loop3: p4 size 2 extends beyond EOD, truncated [ 1637.157335][ T1731] loop3: p5 start 225 is beyond EOD, truncated [ 1637.219167][ T1731] loop3: detected capacity change from 0 to 1 [ 1637.226732][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1637.232020][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1637.239140][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1637.245384][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1637.247587][ T1731] loop3: p2 < > p3 p4 < p5 > [ 1637.252340][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1637.259749][ T1731] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.278476][ T1731] loop3: p3 start 225 is beyond EOD, truncated [ 1637.284698][ T1731] loop3: p4 size 2 extends beyond EOD, truncated [ 1637.292080][ T1731] loop3: p5 start 225 is beyond EOD, truncated 10:51:17 executing program 0: socketpair(0x23, 0x0, 0x7, &(0x7f0000001a80)) 10:51:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000074000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() getrlimit(0x7, &(0x7f0000000140)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x3, 0x5, 0x218, 0x7, 0xa, "21d181ffe2900a98d9c3f1af984c10510933ce"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getrlimit(0x8, &(0x7f0000000180)) tkill(r3, 0x1000000000013) sched_setattr(r3, &(0x7f00000002c0)={0x38, 0x6, 0x10, 0x7, 0x7cd2, 0x1ff, 0x7ff, 0x0, 0x10000, 0xfffffffc}, 0x0) 10:51:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:17 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000012ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1637.349733][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1637.354711][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1637.362237][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1637.368459][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1637.376768][ T1804] serio: Serial port pts0 [ 1637.384492][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1637.395060][ T1811] loop4: detected capacity change from 0 to 1 [ 1637.403706][ T1810] serio: Serial port pts1 10:51:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x4ea00) write$cgroup_int(r3, &(0x7f0000001640), 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 10:51:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000007a000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1637.471242][ T1811] loop4: detected capacity change from 0 to 1 [ 1637.491009][ T1831] loop3: detected capacity change from 0 to 1 10:51:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x50) 10:51:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1637.537499][ T1831] loop3: p2 < > p3 p4 < p5 > [ 1637.542392][ T1831] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.550290][ T1831] loop3: p3 start 225 is beyond EOD, truncated [ 1637.556583][ T1831] loop3: p4 size 2 extends beyond EOD, truncated [ 1637.575400][ T1824] serio: Serial port pts1 [ 1637.578814][ T1851] loop4: detected capacity change from 0 to 1 10:51:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:17 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000090000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1637.635682][ T1831] loop3: p5 start 225 is beyond EOD, truncated [ 1637.673337][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/48, 0x1f}) 10:51:17 executing program 1: prlimit64(0xffffffffffffffff, 0xc, &(0x7f00000002c0)={0xe326, 0x4000010000000795}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = dup(0xffffffffffffffff) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x0, 0x2ace, 0x7, 0xe60, 0x2, "1336e0cc9e82d13cea246762cbe2e79b4322a8"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) getrlimit(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000013) [ 1637.682990][ T1867] serio: Serial port pts0 [ 1637.700325][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1637.708885][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1637.713262][ T1875] loop4: detected capacity change from 0 to 1 [ 1637.715111][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1637.729028][ T1831] loop3: detected capacity change from 0 to 1 10:51:17 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1637.730488][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1637.756803][ T1886] serio: Serial port pts1 10:51:17 executing program 0: clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) [ 1637.778593][ T1831] loop3: p2 < > p3 p4 < p5 > [ 1637.784006][ T1831] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.792319][ T1831] loop3: p3 start 225 is beyond EOD, truncated [ 1637.798606][ T1831] loop3: p4 size 2 extends beyond EOD, truncated [ 1637.808119][ T1831] loop3: p5 start 225 is beyond EOD, truncated 10:51:18 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000013ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000fe000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') lseek(r0, 0x6, 0x0) [ 1637.878342][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1637.883376][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1637.898790][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1637.900855][ T1911] loop4: detected capacity change from 0 to 1 [ 1637.905153][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:51:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) [ 1637.925114][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000340)={0x8157, 0x1, 0x20, 0x3f, 0x8, "c24e069ae469bf610d47b70e254c4a416fd753"}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {r6, r7+10000000}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) tkill(r3, 0x1000000000013) [ 1637.995689][ T1911] loop4: detected capacity change from 0 to 1 [ 1638.021170][ T1935] loop3: detected capacity change from 0 to 1 [ 1638.030448][ T1936] serio: Serial port pts1 [ 1638.071691][ T1935] loop3: p2 < > p3 p4 < p5 > [ 1638.076705][ T1935] loop3: p2 size 2 extends beyond EOD, truncated [ 1638.087636][ T1935] loop3: p3 start 225 is beyond EOD, truncated [ 1638.093858][ T1935] loop3: p4 size 2 extends beyond EOD, truncated [ 1638.101261][ T1935] loop3: p5 start 225 is beyond EOD, truncated [ 1638.141918][ T1935] loop3: detected capacity change from 0 to 1 10:51:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 10:51:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000004020000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:18 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000022ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xf, r3, 0x7, &(0x7f0000000140)="8f8fe0b59dd4f376095561a5938354b4e3c25ef8df9ec707e340288b2a261a4f6f9be16f6228e8f5121852bd816196d7a8636dd55482434c75722e610e60cb3fb34de6fc9eeeb199f0c3dc1b05e2f3852f535be35a14856f387fa71a74d61da5") timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@huge_advise}]}) [ 1638.523482][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1638.528442][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1638.533261][ T1968] loop4: detected capacity change from 0 to 1 [ 1638.542690][ T1971] loop3: detected capacity change from 0 to 1 [ 1638.551104][ T1970] serio: Serial port pts0 [ 1638.551395][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1638.561835][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:18 executing program 0: socket(0x1, 0x0, 0xac) [ 1638.571326][ T1974] serio: Serial port pts1 [ 1638.576679][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:51:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x5f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x1, 0x0, 0xd, 0x0, 0x400000000000008, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x2) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) tkill(r4, 0x1000000000013) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) [ 1638.621209][ T1971] loop3: p2 < > p3 p4 < p5 > [ 1638.626357][ T1971] loop3: p2 size 2 extends beyond EOD, truncated [ 1638.634446][ T1971] loop3: p3 start 225 is beyond EOD, truncated [ 1638.640804][ T1971] loop3: p4 size 2 extends beyond EOD, truncated [ 1638.652386][ T1968] loop4: detected capacity change from 0 to 1 [ 1638.659967][ T1971] loop3: p5 start 225 is beyond EOD, truncated 10:51:18 executing program 0: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1638.702964][ T2018] serio: Serial port pts1 [ 1638.714299][ T1971] loop3: detected capacity change from 0 to 1 10:51:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000030000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:18 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 1638.747655][ T1971] loop3: p2 < > p3 p4 < p5 > [ 1638.752777][ T1971] loop3: p2 size 2 extends beyond EOD, truncated [ 1638.765512][ T1971] loop3: p3 start 225 is beyond EOD, truncated [ 1638.772062][ T1971] loop3: p4 size 2 extends beyond EOD, truncated [ 1638.781288][ T1971] loop3: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000024ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/84, 0x54}], 0x8, 0x0, 0x0, 0x0) [ 1638.814978][ T2052] serio: Serial port pts0 [ 1638.821285][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1638.826236][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1638.837173][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1638.843488][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1638.849485][ T2058] loop4: detected capacity change from 0 to 1 [ 1638.856446][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x2, 'vlan0\x00', {0xff}, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x2}, &(0x7f0000000100)) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xfffffffffffffffc) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) 10:51:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x3}, 0x14}}, 0x0) 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1638.897611][ T2068] loop3: detected capacity change from 0 to 1 [ 1638.931665][ T2079] serio: Serial port pts1 10:51:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) [ 1638.952745][ T2058] loop4: detected capacity change from 0 to 1 [ 1638.959658][ T2068] loop3: p2 < > p3 p4 < p5 > [ 1638.968544][ T2068] loop3: p2 size 2 extends beyond EOD, truncated [ 1638.978476][ T2068] loop3: p3 start 225 is beyond EOD, truncated [ 1638.984810][ T2068] loop3: p4 size 2 extends beyond EOD, truncated [ 1638.996015][ T2068] loop3: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:19 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f00000006c0)) [ 1639.005753][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1639.012033][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.021215][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1639.027456][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.037880][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000002040000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) tkill(r2, 0x17) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0xe, 0x2}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1639.065412][ T2108] serio: Serial port pts0 [ 1639.085434][ T2068] loop3: detected capacity change from 0 to 1 [ 1639.104526][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:19 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000025ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002580), 0x1, 0x2) writev(r1, &(0x7f0000002400)=[{&(0x7f0000000200)='R', 0x1}, {&(0x7f0000000300)="73d12fc16cb9", 0x6}, {&(0x7f0000000380)="bc747687d8ec01053cef70aaceee46e64ad5461f70622ef41d5157e341e7b9d2934dff549d346ae98e036704a6f614752b0c67e29a82ea714fb5dca81cbf613f9b49fde4528d1a5057bb1b9fbcb5be8b72a39f33eb1cf157a4234cd3ac6b11ad67a27bc3198f7452f10ea1dc965f1ddb548d3c15", 0x74}], 0x3) [ 1639.132726][ T2127] loop4: detected capacity change from 0 to 1 [ 1639.144131][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1639.151797][ T2132] serio: Serial port pts1 [ 1639.158739][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1639.164959][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1639.176708][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002580), 0x1, 0x2) writev(r1, &(0x7f0000002400)=[{&(0x7f0000000200)='R', 0x1}, {&(0x7f0000000300)="73d12fc16cb9", 0x6}, {&(0x7f0000000380)="bc747687d8ec01053cef70aaceee46e64ad5461f70622ef41d5157e341e7b9d2934dff549d346ae98e036704a6f614752b0c67e29a82ea714fb5dca81cbf613f9b49fde4528d1a5057bb1b9fbcb5be8b72a39f33eb1cf157a4234cd3ac6b11ad67a27bc3198f7452f10ea1dc965f1ddb548d3c15", 0x74}], 0x3) [ 1639.220364][ T2143] loop3: detected capacity change from 0 to 1 [ 1639.228266][ T2127] loop4: detected capacity change from 0 to 1 [ 1639.246029][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1639.250969][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1639.258877][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:51:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000006040000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1639.265052][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1639.271932][ T2143] loop3: p2 < > p3 p4 < p5 > [ 1639.272037][ T2143] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.273076][ T2143] loop3: p3 start 225 is beyond EOD, truncated [ 1639.273144][ T2143] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.273505][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1639.297260][ T2143] loop3: p5 start 225 is beyond EOD, truncated 10:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x1, 0x0, 0x2000, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x35) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r6 = dup3(r5, r5, 0x80000) recvfrom$inet6(r6, &(0x7f0000000140)=""/104, 0x68, 0x10000, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x1}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1639.321644][ T2172] loop4: detected capacity change from 0 to 1 10:51:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0x407, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000380)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x142a) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000400)="13e2a38743aef86f1b1dead69ed43c3bdef6098df3f7f8d3c7486251008f26ed2e6435707bc7e90890ad4c36088956c64fecacee052062f0a59200e89c327729ebb51d775c8b00813b3b6eae2ce7399294377341ba97a7a17ccaa1bc7cbc7d8ceb18808ee78cd0a23bcb71b27b357b86e45d0197d5dcae07f32abd9d0ced64c8687ff8f239ff8e32dfe4ba4df280682dc268833258a1c0a242c30700611d26c0d86a0d88c30be40899417ec78c1621686478bd053c16e13f1385188b4b8c92a4b769e41d6c7e6a447affc7ff3e226e5527b6622b25b0eeb2eb7f0d939e9f7fe6", &(0x7f0000000500)="9b3cdd706d227fe8f89982a5398e72f463d1ff91b869e60065d8f9"}}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) wait4(r5, &(0x7f00000001c0), 0x1, &(0x7f00000002c0)) 10:51:19 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 1639.379883][ T2143] loop3: detected capacity change from 0 to 1 [ 1639.396998][ T2190] serio: Serial port pts1 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000050000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1639.447944][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1639.448107][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.448829][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1639.448893][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.449266][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1639.450972][ T2143] loop3: p2 < > p3 p4 < p5 > [ 1639.451040][ T2143] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.451798][ T2143] loop3: p3 start 225 is beyond EOD, [ 1639.458279][ T2195] serio: Serial port pts0 [ 1639.462905][ T2143] truncated [ 1639.491264][ T2210] loop4: detected capacity change from 0 to 1 [ 1639.492713][ T2143] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.524650][ T2143] loop3: p5 start 225 is beyond EOD, truncated [ 1639.540529][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1639.545329][ T1038] loop2: p2 size 2 extends beyond EOD, truncated 10:51:19 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000026ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\x04\x00\x00\x00\xf3\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x91l\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, "3b4d9d8a481b7b6280f18c810d38f4d9b8d2ca4dec8797b56fc6b6fd7b02bb4e71a0fa50d044e708fa681f7ae6258c02d6c6b3c7715cbc828196ca7c0ba9198b", "22684ba2ded6d93ac5588f9b290e57fe2cf2ef5ba8c497a08bd8764fbd4ce01475c2f8f39673f5efcae5ed44ea1a0d579d35372aa8c9ee5ae48375ed601c5ff9", "c96081a424554a3eb79dfab9b1cc681e2322ce856dc162905227cf090017ac5e"}) 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r1 = openat(r0, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/94, 0x5e) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) [ 1639.553758][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1639.560099][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1639.574963][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1639.577998][ T2210] loop4: detected capacity change from 0 to 1 10:51:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)) 10:51:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000060000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000380)) r5 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x2000) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x4, 0x1, 0x9, 0x400, 0xd, "503b2cf9df1725cf"}) ptrace$setregs(0xf, r0, 0x10001, &(0x7f0000000140)="32bda306079fe0df62eb29cd622f48e15b42bad8c9f345c5a24bd219390d839390f0d6ccda6f9c60157047cd391de9798d8941ba4d948182d0de20593066348448b91706c482a4aecb80850a644244b60aee64eae02c08c60ccad29b07013650275aec91db79a379e006a38b9d66100c1f992a8c854fc5d046d9478bb9c3780f7622dc25d616d28bfb614d6044f88d9908115a35966988ef318caacf") tkill(r3, 0x1000000000013) 10:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000004080)={&(0x7f0000003f80), 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:51:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d6", 0x8800000}], 0x1, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) [ 1639.673311][ T2250] serio: Serial port pts0 [ 1639.677585][ T2248] loop3: detected capacity change from 0 to 1 [ 1639.711665][ T2258] serio: Serial port pts1 [ 1639.715805][ T2262] loop4: detected capacity change from 0 to 1 [ 1639.757636][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1639.762754][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.769838][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1639.776100][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.785891][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1639.794908][ T2248] loop3: p2 < > p3 p4 < p5 > [ 1639.800241][ T2248] loop3: p2 size 2 extends beyond EOD, truncated 10:51:20 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1639.808311][ T2248] loop3: p3 start 225 is beyond EOD, truncated [ 1639.815131][ T2248] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.823788][ T2248] loop3: p5 start 225 is beyond EOD, truncated [ 1639.831767][ T2262] loop4: detected capacity change from 0 to 1 [ 1639.854337][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1639.859263][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1639.866115][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1639.872812][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1639.883334][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1639.893475][ T2248] loop3: detected capacity change from 0 to 1 [ 1639.937627][ T2248] loop3: p2 < > p3 p4 < p5 > [ 1639.942684][ T2248] loop3: p2 size 2 extends beyond EOD, truncated [ 1639.951287][ T2248] loop3: p3 start 225 is beyond EOD, truncated [ 1639.957542][ T2248] loop3: p4 size 2 extends beyond EOD, truncated [ 1639.965860][ T2248] loop3: p5 start 225 is beyond EOD, truncated 10:51:20 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00002eff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x800000) timer_create(0x4, &(0x7f0000000080)={0x0, 0x16}, &(0x7f0000000100)) r3 = signalfd(r1, &(0x7f0000000140)={[0x1ff]}, 0x8) ioctl$TIOCGPTPEER(r3, 0x5441, 0x10000) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x1000000f, 0x3, 0x400, 0x4, 0xfffffffffffff8ff, 0x4, 0x6, 0x20}, 0x0) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x402000) tkill(r2, 0x1000000000013) 10:51:20 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000004060000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:20 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1640.025811][ T2319] serio: Serial port pts0 [ 1640.045211][ T2327] serio: Serial port pts1 [ 1640.048731][ T2330] loop4: detected capacity change from 0 to 1 [ 1640.086241][ T2345] loop3: detected capacity change from 0 to 1 [ 1640.087732][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1640.098702][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1640.106135][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1640.112432][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1640.127734][ T2345] loop3: p2 < > p3 p4 < p5 > 10:51:20 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1640.127814][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1640.132857][ T2345] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.157113][ T2330] loop4: detected capacity change from 0 to 1 [ 1640.163902][ T2345] loop3: p3 start 225 is beyond EOD, truncated [ 1640.170189][ T2345] loop3: p4 size 2 extends beyond EOD, truncated 10:51:20 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000070000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1640.180521][ T2345] loop3: p5 start 225 is beyond EOD, truncated [ 1640.189822][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1640.194657][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.202161][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1640.208542][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.216129][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:20 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) 10:51:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1640.256672][ T2369] loop4: detected capacity change from 0 to 1 [ 1640.277622][ T2345] loop3: detected capacity change from 0 to 1 10:51:20 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1640.315545][ T2386] serio: Serial port pts1 10:51:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x0, 0xd, "8c694a09cd096462"}) [ 1640.337776][ T2345] loop3: p2 < > p3 p4 < p5 > [ 1640.347953][ T2369] loop4: detected capacity change from 0 to 1 [ 1640.353890][ T2345] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.366253][ T2345] loop3: p3 start 225 is beyond EOD, truncated [ 1640.372511][ T2345] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.390714][ T2345] loop3: p5 start 225 is beyond EOD, truncated [ 1640.401253][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1640.406266][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.420068][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1640.426281][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.433786][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:20 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000048ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1640.464419][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1640.469251][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1640.476583][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1640.482975][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1640.489893][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1640.507912][ T2430] loop3: detected capacity change from 0 to 1 [ 1640.557690][ T2430] loop3: p2 < > p3 p4 < p5 > [ 1640.562815][ T2430] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.569947][ T2430] loop3: p3 start 225 is beyond EOD, truncated [ 1640.576706][ T2430] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.584747][ T2430] loop3: p5 start 225 is beyond EOD, truncated [ 1640.592746][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1640.598262][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.605300][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1640.611543][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.619000][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1640.662995][ T2430] loop3: detected capacity change from 0 to 1 [ 1640.670836][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1640.675738][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1640.682964][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1640.689426][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1640.696131][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1640.703658][ T2430] loop3: p2 < > p3 p4 < p5 > [ 1640.708540][ T2430] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.722532][ T2430] loop3: p3 start 225 is beyond EOD, truncated [ 1640.729700][ T2430] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.745137][ T2430] loop3: p5 start 225 is beyond EOD, truncated [ 1640.790654][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1640.795559][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1640.802673][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1640.809224][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1640.816250][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) setrlimit(0x0, &(0x7f0000000140)={0x67e6, 0x100000000}) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0xb5, 0x800}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x8001, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x100, 0x800, 0x10000006, 0xffff, 0xc, "1408b54ee15109b42679b8a46c3f9f1aebc200"}) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:23 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:23 executing program 0: socket(0x2a, 0x2, 0x0) 10:51:23 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000090000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:23 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00004cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:23 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000400)=""/199) 10:51:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xb, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0xc) [ 1643.050226][ T2472] serio: Serial port pts0 [ 1643.062740][ T2475] loop3: detected capacity change from 0 to 1 [ 1643.073412][ T2476] loop4: detected capacity change from 0 to 1 [ 1643.079601][ T2482] serio: Serial port pts1 10:51:23 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:23 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) [ 1643.136909][ T2475] loop3: p2 < > p3 p4 < p5 > [ 1643.142035][ T2475] loop3: p2 size 2 extends beyond EOD, truncated [ 1643.162847][ T2475] loop3: p3 start 225 is beyond EOD, truncated [ 1643.169269][ T2475] loop3: p4 size 2 extends beyond EOD, truncated 10:51:23 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 1643.184670][ T2475] loop3: p5 start 225 is beyond EOD, truncated [ 1643.199580][ T2476] loop4: detected capacity change from 0 to 1 [ 1643.219368][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1643.224160][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:51:23 executing program 0: pipe(&(0x7f0000000480)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) [ 1643.232538][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1643.238817][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1643.249091][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getrlimit(0x5, &(0x7f0000001300)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x5, 0x12, 0x9, 0x2, 0x8, 0x8000, 0x69a, 0xf76, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) sched_setattr(r0, &(0x7f00000012c0)={0x38, 0x1, 0x10000001, 0x7, 0x1f, 0x6, 0x8001, 0x101, 0x5, 0xffff8000}, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000002c0)={{r3}, "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"}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:23 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:23 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000060ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:23 executing program 0: add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 10:51:23 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000a0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1643.343809][ T2538] serio: Serial port pts0 [ 1643.350035][ T2541] loop4: detected capacity change from 0 to 1 [ 1643.350522][ T2539] serio: Serial port pts1 [ 1643.356541][ T2542] loop3: detected capacity change from 0 to 1 [ 1643.372531][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1643.377920][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1643.385018][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:51:23 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 10:51:23 executing program 0: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xbfeffffd) [ 1643.391255][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1643.398797][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1643.427542][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1643.432690][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:51:23 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x6f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1643.440850][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1643.447085][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1643.454986][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1643.456794][ T2566] futex_wake_op: syz-executor.0 tries to shift op by -257; fix this program [ 1643.475882][ T2566] futex_wake_op: syz-executor.0 tries to shift op by -257; fix this program [ 1643.478308][ T2541] loop4: detected capacity change from 0 to 1 10:51:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 10:51:23 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') 10:51:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1643.492116][ T2542] loop3: p2 < > p3 p4 < p5 > [ 1643.496918][ T2542] loop3: p2 size 2 extends beyond EOD, truncated [ 1643.511449][ T2542] loop3: p3 start 225 is beyond EOD, truncated [ 1643.517744][ T2542] loop3: p4 size 2 extends beyond EOD, truncated [ 1643.526121][ T2542] loop3: p5 start 225 is beyond EOD, truncated 10:51:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:23 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000b0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1643.600751][ T2542] loop3: detected capacity change from 0 to 1 [ 1643.613573][ T2596] serio: Serial port pts0 [ 1643.621696][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1643.626865][ T2601] loop4: detected capacity change from 0 to 1 [ 1643.626895][ T2600] serio: Serial port pts1 [ 1643.633786][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1643.645177][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1643.651573][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1643.662348][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1643.668307][ T2542] loop3: p2 < > p3 p4 < p5 > [ 1643.676591][ T2542] loop3: p2 size 2 extends beyond EOD, truncated [ 1643.683806][ T2542] loop3: p3 start 225 is beyond EOD, truncated [ 1643.690468][ T2542] loop3: p4 size 2 extends beyond EOD, truncated 10:51:23 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:23 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000068ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:23 executing program 0: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) [ 1643.700030][ T2601] loop4: detected capacity change from 0 to 1 [ 1643.706694][ T2542] loop3: p5 start 225 is beyond EOD, truncated 10:51:23 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000c0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() sendto$inet(0xffffffffffffffff, &(0x7f0000001000)="566142aa9e4e181463b4f2c1d6047b299b7d81afed892e08d5b2b890e1513a5fa9c4a6198cc7b89944366ab0ce3cd847d558938ef0af4f4421815adcc8ed8b9a18ba53ce8e12605b85c6117e00ccc1041273fc27d006de164ec12a717ce0054d7ad0e5743464f1d6b55a0c50585496f19817d9ece95f9cef81dd1acc683b029e59b9", 0x82, 0xc090, &(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f00000071c0)}, 0x7}], 0x2, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000002c0)={0x10f0, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, "", [@typed={0xdf, 0x57, 0x0, 0x0, @binary="adc66348a1fd02c19f21d8be94b8128ea6de5ae7f0df722ffb6dd8e43dbb31066d704c20714ec816068f3dd7a1f3e6f998d9c217c9886060a459a18aaca6a11afad521974c1cef6baf8286a740cadb318ad6f24da89cc82d7b5fb93007b263aa18a4d27e765f8a5efabd424ecf1267678c8a43fe7bbb28ca9c8956eff980d4ffa1818691e28b405b7afc3d497a81c4217da26207788e98604174d2de562df64e7b6ccbc46826fa86c4d2d2ced930db46fac2305941811cf01c7e504bfca5177fd68cd219d7af04515d7b970b0bdd66e927bb7f015a1ebfc7292562"}, @generic="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"]}, 0x10f0}, {&(0x7f0000000180)={0x18, 0x32, 0x2, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x15, 0x0, 0x0, @fd}]}, 0x18}], 0x2, 0x0, 0x0, 0x4000804}, 0x48801) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:24 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1643.809886][ T2640] loop3: detected capacity change from 0 to 1 [ 1643.836793][ T2643] loop4: detected capacity change from 0 to 1 [ 1643.843419][ T2644] serio: Serial port pts1 10:51:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) [ 1643.862010][ T2640] loop3: p2 < > p3 p4 < p5 > [ 1643.867513][ T2640] loop3: p2 size 2 extends beyond EOD, truncated [ 1643.882014][ T2640] loop3: p3 start 225 is beyond EOD, truncated [ 1643.888595][ T2640] loop3: p4 size 2 extends beyond EOD, truncated [ 1643.904121][ T2643] loop4: detected capacity change from 0 to 1 10:51:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1643.910830][ T2640] loop3: p5 start 225 is beyond EOD, truncated 10:51:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 1643.933963][ T2664] serio: Serial port pts0 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x1000, 0x6, 0x10000, 0x2d786293, 0x12, "affbbcb7bf216c43b053998665f57564835c41"}) r2 = syz_open_pts(r1, 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000d0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1643.959052][ T2640] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1643.974446][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1643.979580][ T2640] loop3: detected capacity change from 0 to 1 [ 1643.989186][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1644.009350][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1644.015753][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1644.019752][ T2680] serio: Serial port pts1 [ 1644.027081][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1644.058694][ T2640] loop3: p2 < > p3 p4 < p5 > [ 1644.063755][ T2640] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.071988][ T2640] loop3: p3 start 225 is beyond EOD, truncated [ 1644.078874][ T2640] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.080022][ T2693] loop4: detected capacity change from 0 to 1 [ 1644.087431][ T2640] loop3: p5 start 225 is beyond EOD, truncated [ 1644.101562][ T1038] loop3: p2 < > p3 p4 < p5 > 10:51:24 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00006cff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:24 executing program 0: io_setup(0x9, &(0x7f0000000080)) io_setup(0x1, &(0x7f0000000100)) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1644.106413][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.113887][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1644.120311][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.127985][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0xa4, 0x1000, 0x1, 0x1f, 0x17, "9b44e2715fd9915eb15702ea61052f698981da"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000003c0)={&(0x7f0000000300)=""/134, 0x86}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000440)={0x9, 0x30, [0x1004000000000000, 0x55, 0x401, 0x485e9b4f], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x2, &(0x7f0000000580)={0x0, 0x16, 0x1, @thr={&(0x7f0000000480)="10efa2a90e982655e403c6fd350c322f1a020342680bdeff05f197d98f581c7f38ce93c5491c0c99755c3f9516192458c75ee74ceda2923f6e467dbeb1e8be235f2ec3047f909f81d0ad0f36526aae58a258ba5b9fcc96f0770b15e24bd8c5c0706963ff45ac13772506d55b9d49aeb2ef22b5e325121736d9292615c767740c0a25b9d71c0c43a7b02fb6033e34", &(0x7f0000000540)="06d23450074a4016e7bb550b6534e2a320754345c41883"}}, &(0x7f00000005c0)) tkill(r3, 0x1000000000013) [ 1644.178840][ T2693] loop4: detected capacity change from 0 to 1 [ 1644.192209][ T2716] serio: Serial port pts1 10:51:24 executing program 0: clock_gettime(0x2, &(0x7f0000000800)) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.219893][ T2724] loop3: detected capacity change from 0 to 1 [ 1644.242599][ T2727] serio: Serial port pts0 [ 1644.258810][ T1038] loop3: p2 < > p3 p4 < p5 > 10:51:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 10:51:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000e0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1644.264210][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.274175][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1644.280433][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.291390][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1644.299648][ T2742] loop4: detected capacity change from 0 to 1 [ 1644.308036][ T2724] loop3: p2 < > p3 p4 < p5 > [ 1644.313059][ T2724] loop3: p2 size 2 extends beyond EOD, truncated 10:51:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002340)={0x842}, 0x4) 10:51:24 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000011c0)=""/95) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.320760][ T2724] loop3: p3 start 225 is beyond EOD, truncated [ 1644.326946][ T2724] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.334942][ T2724] loop3: p5 start 225 is beyond EOD, truncated [ 1644.368689][ T2742] loop4: detected capacity change from 0 to 1 [ 1644.375865][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1644.380999][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1644.399529][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1644.405768][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1644.411376][ T2724] loop3: detected capacity change from 0 to 1 [ 1644.413801][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1644.447654][ T2724] loop3: p2 < > p3 p4 < p5 > [ 1644.452698][ T2724] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.465546][ T2724] loop3: p3 start 225 is beyond EOD, truncated [ 1644.471795][ T2724] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.478656][ T2724] loop3: p5 start 225 is beyond EOD, truncated [ 1644.506176][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:24 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000074ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:24 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/23) 10:51:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x16, 0x0, @thr={&(0x7f0000000140)="8a27ecfa2019a64db08e1ac4b1a255f358bc5184aa959aa0983871dcd7ab59", &(0x7f0000000180)="acc385e47b1c5b4c1dd263b193fd53413d1dede6fc0f91bfc826112dac88796e0da232ec0e5eb90c4c27364d4103031ec79406a26da5b1a7dc301f8ef120bef3b0dfc5c006f4d8caaf79aae4bf2b06bfe5b49adc452d2b3b91675cdcc96c995844d31654c147ab"}}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000000f0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.517754][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1644.525478][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1644.531832][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1644.539209][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:24 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) [ 1644.575104][ T2801] serio: Serial port pts0 [ 1644.580140][ T2799] loop4: detected capacity change from 0 to 1 [ 1644.590907][ T2804] serio: Serial port pts1 10:51:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.618604][ T2817] loop3: detected capacity change from 0 to 1 [ 1644.657630][ T1038] loop3: p2 < > p3 p4 < p5 > 10:51:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0) [ 1644.663307][ T2799] loop4: detected capacity change from 0 to 1 [ 1644.669031][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.678026][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1644.684306][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.699023][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1644.707125][ T2817] loop3: p2 < > p3 p4 < p5 > [ 1644.711978][ T2817] loop3: p2 size 2 extends beyond EOD, truncated 10:51:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 10:51:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.719257][ T2817] loop3: p3 start 225 is beyond EOD, truncated [ 1644.725685][ T2817] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.733131][ T2817] loop3: p5 start 225 is beyond EOD, truncated [ 1644.797513][ T2817] loop3: detected capacity change from 0 to 1 [ 1644.860435][ T2817] loop3: p2 < > p3 p4 < p5 > [ 1644.880432][ T2817] loop3: p2 size 2 extends beyond EOD, truncated [ 1644.900772][ T2817] loop3: p3 start 225 is beyond EOD, truncated 10:51:25 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a00007aff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000110000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:25 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1644.907123][ T2817] loop3: p4 size 2 extends beyond EOD, truncated [ 1644.912686][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1644.916736][ T2817] loop3: p5 start 225 is beyond EOD, truncated [ 1644.918706][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1644.932512][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1644.938960][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1644.945866][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1644.982696][ T2877] loop4: detected capacity change from 0 to 1 [ 1645.000267][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1645.005100][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1645.012545][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1645.018911][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1645.025710][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1645.055758][ T2877] loop4: detected capacity change from 0 to 1 [ 1645.068612][ T2887] loop3: detected capacity change from 0 to 1 [ 1645.101122][ T2887] loop3: p2 < > p3 p4 < p5 > [ 1645.106110][ T2887] loop3: p2 size 2 extends beyond EOD, truncated [ 1645.119008][ T2887] loop3: p3 start 225 is beyond EOD, truncated [ 1645.125385][ T2887] loop3: p4 size 2 extends beyond EOD, truncated [ 1645.133575][ T2887] loop3: p5 start 225 is beyond EOD, truncated [ 1645.168392][ T2887] loop3: detected capacity change from 0 to 1 [ 1645.197697][ T2887] loop3: p2 < > p3 p4 < p5 > [ 1645.202870][ T2887] loop3: p2 size 2 extends beyond EOD, truncated [ 1645.210722][ T2887] loop3: p3 start 225 is beyond EOD, truncated [ 1645.217091][ T2887] loop3: p4 size 2 extends beyond EOD, truncated [ 1645.224108][ T2887] loop3: p5 start 225 is beyond EOD, truncated 10:51:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x44, 0x5, 0x8e9, 0x6, 0x3, 0x9, 0x1, 0x48a}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x6, 0x2, 0x4c77, 0x8001, 0xbf1, 0xc1, 0x0, 0x5937, 0x8}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:27 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') 10:51:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:27 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:27 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000120000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:27 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0000e1ff45ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:27 executing program 0: unshare(0x20000400) unshare(0x10000000) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000001140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/class/rtc', 0x200000, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x238, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x48}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffb}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ae}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x1b1}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe856}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x2f51}, {0x5, 0x14, 0x1}}]}, 0x238}, 0x1, 0x0, 0x0, 0x10}, 0x4000884) [ 1647.600014][ T2923] loop3: detected capacity change from 0 to 1 [ 1647.602268][ T2922] serio: Serial port pts0 [ 1647.611586][ T2924] loop4: detected capacity change from 0 to 1 [ 1647.619635][ T2925] serio: Serial port pts1 10:51:27 executing program 0: sched_getattr(0x0, &(0x7f0000000280)={0x38}, 0x38, 0x0) 10:51:27 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1647.647809][ T2923] loop3: p2 < > p3 p4 < p5 > [ 1647.653322][ T2923] loop3: p2 size 2 extends beyond EOD, truncated [ 1647.661319][ T2923] loop3: p3 start 225 is beyond EOD, truncated [ 1647.667625][ T2923] loop3: p4 size 2 extends beyond EOD, truncated [ 1647.679874][ T2923] loop3: p5 start 225 is beyond EOD, truncated 10:51:27 executing program 0: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x3}, 0xfffffffffffffffe) 10:51:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1647.719709][ T2924] loop4: detected capacity change from 0 to 1 [ 1647.733027][ T2923] loop3: detected capacity change from 0 to 1 10:51:27 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_targets\x00') dup3(r1, r0, 0x0) [ 1647.781258][ T2923] loop3: p2 < > p3 p4 < p5 > [ 1647.789140][ T2923] loop3: p2 size 2 extends beyond EOD, truncated [ 1647.795766][ T2925] serio: Serial port pts1 [ 1647.796487][ T2923] loop3: p3 start 225 is beyond EOD, truncated [ 1647.806339][ T2923] loop3: p4 size 2 extends beyond EOD, truncated [ 1647.816608][ T2923] loop3: p5 start 225 is beyond EOD, truncated 10:51:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_open_pts(r2, 0x101000) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 10:51:28 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000200000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:28 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:28 executing program 0: io_setup(0xffffff55, &(0x7f0000000100)) 10:51:28 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a0000000245ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1647.897396][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1647.902187][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1647.903472][ T2986] loop4: detected capacity change from 0 to 1 [ 1647.922120][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1647.926259][ T2991] serio: Serial port pts0 [ 1647.928378][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1647.940598][ T2988] serio: Serial port pts1 10:51:28 executing program 0: pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 10:51:28 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1647.947053][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:28 executing program 0: inotify_init1(0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x8}, 0x0) [ 1648.010124][ T2999] loop3: detected capacity change from 0 to 1 [ 1648.016584][ T2986] loop4: detected capacity change from 0 to 1 [ 1648.025863][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.031449][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.039866][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.046592][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1648.055402][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1648.067771][ T2999] loop3: p2 < > p3 p4 < p5 > [ 1648.073778][ T2999] loop3: p2 size 2 extends beyond EOD, truncated [ 1648.083051][ T2999] loop3: p3 start 225 is beyond EOD, truncated [ 1648.089314][ T2999] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.099419][ T2999] loop3: p5 start 225 is beyond EOD, truncated 10:51:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x3, 0x4, 0x0, 0x2, "0000000400000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:28 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000220000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:28 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1648.109217][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1648.115257][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1648.123120][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1648.129710][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.142160][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000180)={0x9, 0x7fff}, &(0x7f00000001c0)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) r3 = syz_open_pts(r2, 0x52081) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0xc2f4, 0xfffa, 0x6, 0x1ff, 0x9, 0x2}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1648.197150][ T2999] loop3: detected capacity change from 0 to 1 [ 1648.214175][ T3052] loop4: detected capacity change from 0 to 1 [ 1648.228878][ T2999] loop3: p2 < > p3 p4 < p5 > [ 1648.233978][ T2999] loop3: p2 size 2 extends beyond EOD, truncated 10:51:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:28 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff09ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x3f000000, 0x4000007ffffffd}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x105) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1648.242116][ T2999] loop3: p3 start 225 is beyond EOD, truncated [ 1648.248481][ T2999] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.256079][ T2999] loop3: p5 start 225 is beyond EOD, truncated 10:51:28 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x7f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1648.299064][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.315734][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.327302][ T3075] serio: Serial port pts0 [ 1648.330430][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.337950][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:28 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000250000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1648.346539][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1648.379496][ T3089] loop4: detected capacity change from 0 to 1 [ 1648.386321][ T3090] loop3: detected capacity change from 0 to 1 [ 1648.391303][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.397491][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.408214][ T3090] loop3: p2 < > p3 p4 < p5 > [ 1648.413050][ T3090] loop3: p2 size 2 extends beyond EOD, truncated [ 1648.413202][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.425754][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1648.435161][ T3090] loop3: p3 start 225 is beyond EOD, truncated [ 1648.436346][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1648.441886][ T3090] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.459124][ T3090] loop3: p5 start 225 is beyond EOD, truncated [ 1648.472811][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.479335][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.486350][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.492601][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1648.496312][ T3089] loop4: detected capacity change from 0 to 1 [ 1648.499557][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1648.519859][ T3090] loop3: detected capacity change from 0 to 1 [ 1648.530386][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.535178][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.542231][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.549100][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1648.555892][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1648.571547][ T3090] loop3: p2 < > p3 p4 < p5 > [ 1648.579954][ T3090] loop3: p2 size 2 extends beyond EOD, truncated [ 1648.590573][ T3090] loop3: p3 start 225 is beyond EOD, truncated [ 1648.596804][ T3090] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.604296][ T3090] loop3: p5 start 225 is beyond EOD, truncated [ 1648.638710][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1648.643564][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1648.650287][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1648.656566][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1648.663381][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:29 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa441, 0x0) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0xfffffffa, 0xfffffffe, 0x401, 0x7fffffff, 0x18, "06e674edb0142be3071f22acf2a14592accd0a"}) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfc, 0x40, 0xfffffff8, 0x3ff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000003f0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:29 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff0aac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1648.930710][ T3144] loop4: detected capacity change from 0 to 1 [ 1648.935451][ T3147] serio: Serial port pts1 [ 1648.938910][ T3145] loop3: detected capacity change from 0 to 1 10:51:29 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [{}], {}, [{0x8, 0x0, 0xee00}]}, 0x34, 0x0) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1648.971524][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1648.976622][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1648.984469][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1648.990895][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1649.001245][ T3145] loop3: p2 < > p3 p4 < p5 > [ 1649.006544][ T3145] loop3: p2 size 2 extends beyond EOD, truncated [ 1649.015483][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1649.021996][ T3145] loop3: p3 start 225 is beyond EOD, truncated [ 1649.028307][ T3145] loop3: p4 size 2 extends beyond EOD, truncated [ 1649.048273][ T3144] loop4: detected capacity change from 0 to 1 [ 1649.048673][ T3145] loop3: p5 start 225 is beyond EOD, truncated 10:51:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1649.082860][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1649.089490][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1649.108949][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1649.115161][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:29 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 10:51:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000400000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1649.131810][ T3145] loop3: detected capacity change from 0 to 1 [ 1649.147890][ T3190] serio: Serial port pts0 [ 1649.150610][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1649.183504][ T3145] loop3: p2 < > p3 p4 < p5 > [ 1649.188745][ T3145] loop3: p2 size 2 extends beyond EOD, truncated [ 1649.194458][ T3202] loop4: detected capacity change from 0 to 1 [ 1649.214948][ T3145] loop3: p3 start 225 is beyond EOD, truncated [ 1649.221358][ T3145] loop3: p4 size 2 extends beyond EOD, truncated 10:51:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 10:51:29 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff25ac0000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') 10:51:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000480000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1649.233251][ T3145] loop3: p5 start 225 is beyond EOD, truncated [ 1649.265626][ T3204] serio: Serial port pts0 10:51:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) dup3(r2, r2, 0x80000) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1649.338947][ T3227] loop4: detected capacity change from 0 to 1 [ 1649.365846][ T3233] serio: Serial port pts0 10:51:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FITHAW(r0, 0xc0045878) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1649.397401][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1649.402657][ T3246] loop3: detected capacity change from 0 to 1 [ 1649.402973][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1649.418212][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1649.418272][ T3227] loop4: detected capacity change from 0 to 1 [ 1649.424468][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1649.439068][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:29 executing program 0: rt_sigaction(0x2c, &(0x7f0000000100)={&(0x7f0000000000)="c4616169e7c441257c0f8fe9d0900fc4e3fd009e68340000f94205240000006440d95ef564643664f3400fae73e4450f2edd2ef32e0fbc5000450f5e1ce3", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 10:51:29 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000004c0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1649.467592][ T3246] loop3: p2 < > p3 p4 < p5 > [ 1649.473361][ T3246] loop3: p2 size 2 extends beyond EOD, truncated [ 1649.506115][ T3246] loop3: p3 start 225 is beyond EOD, truncated [ 1649.512520][ T3246] loop3: p4 size 2 extends beyond EOD, truncated [ 1649.527553][ T3246] loop3: p5 start 225 is beyond EOD, truncated [ 1649.557936][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1649.562819][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1649.570527][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1649.576828][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1649.586459][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1649.596981][ T3246] loop3: detected capacity change from 0 to 1 [ 1649.612563][ T3282] loop4: detected capacity change from 0 to 1 [ 1649.647594][ T3246] loop3: p2 < > p3 p4 < p5 > [ 1649.652657][ T3246] loop3: p2 size 2 extends beyond EOD, truncated [ 1649.660533][ T3246] loop3: p3 start 225 is beyond EOD, truncated [ 1649.667061][ T3246] loop3: p4 size 2 extends beyond EOD, truncated [ 1649.674121][ T3246] loop3: p5 start 225 is beyond EOD, truncated [ 1649.682752][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1649.687611][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:51:29 executing program 0: unshare(0x20000400) unshare(0x28020400) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1) 10:51:29 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0200ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:29 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1649.694473][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1649.700717][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1649.708092][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1649.708921][ T3282] loop4: detected capacity change from 0 to 1 10:51:29 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000740)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 10:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1649.746639][ T3300] serio: Serial port pts0 10:51:29 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/user\x00') 10:51:30 executing program 0: add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) [ 1649.783927][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1649.789456][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1649.796651][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1649.802872][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1649.811248][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000680000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:30 executing program 0: socket(0x10, 0x3, 0x100) [ 1649.845315][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1649.854420][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1649.874480][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1649.880809][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1649.887146][ T3332] loop3: detected capacity change from 0 to 1 10:51:30 executing program 1: prlimit64(0x0, 0x3, &(0x7f0000000280)={0x7, 0x1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x1c, 0x0, 0x7, 0x0, 0x0, 0x9, 0x2, 0x8}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x1, 0x6, 0x1ff, 0x1000}) r3 = signalfd(r1, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x8) ioctl$TCXONC(r3, 0x540a, 0x1) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 1649.896231][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1649.927571][ T3332] loop3: p2 < > p3 p4 < p5 > [ 1649.932619][ T3332] loop3: p2 size 2 extends beyond EOD, truncated [ 1649.936593][ T3346] serio: Serial port pts1 10:51:30 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') dup3(r0, r1, 0x0) [ 1649.949678][ T3332] loop3: p3 start 225 is beyond EOD, truncated [ 1649.955047][ T3350] loop4: detected capacity change from 0 to 1 [ 1649.956035][ T3332] loop3: p4 size 2 extends beyond EOD, truncated [ 1649.975583][ T3332] loop3: p5 start 225 is beyond EOD, truncated [ 1650.004356][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1650.009992][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.017247][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1650.023465][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1650.031026][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1650.062185][ T3350] loop4: detected capacity change from 0 to 1 [ 1650.083491][ T3332] loop3: detected capacity change from 0 to 1 [ 1650.151475][ T3332] loop3: p2 < > p3 p4 < p5 > [ 1650.157476][ T3332] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.171790][ T3332] loop3: p3 start 225 is beyond EOD, truncated [ 1650.178061][ T3332] loop3: p4 size 2 extends beyond EOD, truncated [ 1650.187516][ T3332] loop3: p5 start 225 is beyond EOD, truncated 10:51:30 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0300ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000006c0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:30 executing program 0: unshare(0x600) unshare(0x20020000) 10:51:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x20000051, 0x200, 0x4, 0x4, 0x2, 0xffffffffffffffff, 0x4, 0x51c9}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r2 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000013) [ 1650.258795][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1650.263697][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.281142][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1650.285579][ T3397] loop4: detected capacity change from 0 to 1 [ 1650.287405][ T1038] loop3: p4 size 2 extends beyond EOD, truncated 10:51:30 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='numa_maps\x00') 10:51:30 executing program 0: creat(&(0x7f0000000140)='.\x00', 0x0) [ 1650.312537][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1650.360786][ T3397] loop4: detected capacity change from 0 to 1 10:51:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:30 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000740000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1650.437516][ T3418] loop3: detected capacity change from 0 to 1 [ 1650.518377][ T3432] loop4: detected capacity change from 0 to 1 [ 1650.518569][ T3418] loop3: p2 < > p3 p4 < p5 > [ 1650.537377][ T3418] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.546651][ T3418] loop3: p3 start 225 is beyond EOD, truncated [ 1650.552917][ T3418] loop3: p4 size 2 extends beyond EOD, truncated 10:51:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1}}], 0x2, 0x10022, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="8afe831346f105b3cb21d840919518c0da2b89816ffdf23474bc4e47df6e5de51fe79648140e4623ff92a667a6c51e586a09443d1fbc39be0aa77afaaeea13c49377e857683967f4b2237025e05afce0528aaa777f9a63b9d12c2fc756784d4fe86144c6c8ffb8f08e633e35c8293338d6cf8576e22c6f928a28fa1c8b018764e2ffc0506345170d50e41b8a26462d4a015971c9a0a8385c15bedf1d0323803e50", 0xa1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000740)={0x2570, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, "", [@generic="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", @generic="73a83b186ca26e7a1fd9c109d557c870b3687b788410543b0cfab10d0dbe3e73af98c65c25741bf95d03b78c2d257a0d11f391f927afdd5b6d60b4e4cfaf3d6f9c52913bbba332a7e7af823935e83e12cfd1409e53ff87e2648cd50cd0335e6d0980e5c0d81087c89e533278269f5d7bab02cdbf50adae1dd6daec81258fcce2ab4707f56a774e4f5e0529552c241600d62defae4b18d5ea3dde1f92fc81cc", @generic="7767ed0469609eb32d57e2b2dce2ed8a2fbd60cc7b1fa2596f37039b04aab2a0e5ec8dc87d68245d3780bc05b9838f330fa7adf1f78ee03e5f4432e2607d416922e03f5331facfd311cf6f6ac095d0625dd604972e681bce6f0ba934b2ad8bcc16f2", @nested={0x26e, 0x38, 0x0, 0x1, [@generic="d69a111e93a1a0dca36e1e815027291e62ddc27e747e37ce22fe65dd63973307605c10df236b69de6e46975ef007ebb046d9a9a2cb25194b5b229a22037a87632ebedf20f63111073f28de25eb629bfd08475b6496812d8ff80df8bb15a09414296ecb0cb680f1ae17f37a5c7284348ccc9cf5175009e73d7515244b2f82fbf13cd82e30a431", @generic="c338660c69c91bcff58c8edcb0eaafa4d69e58c0c822d366666e5dc55c5422c9fcbed5a32da8fddf5deb42ad54e94cb1dc2d85abedb7dcf41071ba4e13b7c012f09c7496c0d979acadb8e35db5eb1215ca17b327bc1a1374e9751e1d48026e326c088bf743adae72e4fbaa076e530e3f2a0cf741bce918067481c31136b8444ce4d33fdf0ed0e61ac182d24a28fe17db5d750170d73b6efaf480bde4315b86128af6c728d0e9d8ab2e0eb876302094005c9fc486ba2baf8df5b472ba3255fcc75501f72f", @typed={0x8, 0x62, 0x0, 0x0, @uid}, @generic="ddf466a3209fd77f95271dc6c4a4f5ac7648f159e5d4889f1e4e827894d2634b18f21afdf920a51f389a5b6e498c15be157785b1a7d1b62ed1a2b9263e7fe58dfaa85442235d331fd8abca9ead99f0ca2bc4393202bd518d98ffe3e97be8089e72bdea671dc08b969607685af9d0b947f3c931a8c799809cbc7d8adbd779877de7b59b8a4eba67d93037de2f45c7262711ad7e762ea7fbeb6e89fdf3014a407a5a157bcca0d8f8639d03f5c26e73c9", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @generic="87bea04c358132a6e6de4cef040c05d4763445f7c57f570b4b6619b893a938bb050329c4cab065be222f4df358e7ca4e5d177a77e13aff40eaf1a0b126a6e47e4e2d90af88eb65b7ab918d4b3bfd0211a7c32fdc00c7698fc90ef8d26a8b7ce94e"]}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x6}, @nested={0x11d8, 0x7f, 0x0, 0x1, [@typed={0x103, 0x3d, 0x0, 0x0, @binary="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"}, @generic="346745c2761d81a6c45ba5ddcaa2b5bc6e7614778ec96c0c63abab1821f9fabf3207d05e9b014d6be47d6b323e51337943724962ef0ed44681ff94961b7c4847a1b7b53345294a22781e2acf85f5f3d5b79211c0bba1ae436262bd47d4aef48b684d662cb2ab4c1556b6eecfb525d423d8ccce2fd945a5aa7e5f131c7e1cc7cf285355d0f98b69667f81ce03a7e7bdea5bd4cbd56c4a4375f8526126e76a0247", @typed={0x8, 0x77, 0x0, 0x0, @u32=0x9}, @generic="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", @typed={0xe, 0x55, 0x0, 0x0, @str='/dev/ptmx\x00'}, @typed={0x4, 0x61}, @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x35, 0x0, 0x0, @fd}]}, 0x2570}, {&(0x7f0000002cc0)={0x41c, 0x17, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x28, 0x51, 0x0, 0x1, [@typed={0x4, 0x2}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x1000}, @typed={0xc, 0x45, 0x0, 0x0, @u64=0xedff}]}, @generic="f98d250fe727e9323663c36057e6900629b7ed81ae96a87f390862d8984c32715cc24461f6cc4d6fcc34993de63228a4a5127af42aca4247d337011bc31605635ace29d43f63db2f5ca0c9012a76fa7dd2a45d33f044f2dcf0b67c8f21a7495a9d767efb1042e30f717b8e3b725453464a55cc2ff4041a8a8665ed6045d48a7a09e3cc07bf0ad6c90e30282087fbf90c18451ea43b5bf6fdc970de6cc970fcf140947f4e632bc48fdc346a3fc56a4967649eae9ec5d8304d8ac9114f154c", @nested={0x15d, 0xa, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}, @typed={0x75, 0x2, 0x0, 0x0, @binary="e604d8ea477f937095a5c48e0526bfd2ea02aa63b5389493de2f8e80972abecf390d4d56b049957f504045fc5bad3457f9833bd4c20c998aa4d1b496ba07a2089e06bd766620b8427db13278f5e9e978b3c01685e03e45999a105d31489c63c6462ce9668139e6c51ca0ffe391f101fc73"}, @typed={0x8, 0x42, 0x0, 0x0, @uid}, @generic="688834b235e57cc67804e7028763e3e23fab6e0d79317efeb35a330db94b8b01ecca271ffc3eaec5742da4604b050ee1a27e2c090a053aa10a20734594734c82f0e7a65ff1fc1aa41e1ffb5c874ad48d96944d57bd5f62b7a82a7ae553754fe54c82feafa966b9ce856eaad619c0e06bddb0a9", @typed={0xe, 0x7c, 0x0, 0x0, @str='/dev/ptmx\x00'}, @generic="3e0617fd68dec1bada7511803d57752b900d6adf482a5dadac6be900d3904474357f0908d442876a501c24b5e890d4eb7aacd98c84e7fa700152b6549c4d218a3255eec63c9868df54630196f895"]}, @typed={0x8, 0x7f, 0x0, 0x0, @fd}, @nested={0x74, 0xa, 0x0, 0x1, [@generic="1b19991a3ce1cd86cce43bf2233ce120057b6a021072a4959363826a7176c8f7a661d464457a6ce36382cca9c095c3e1fb65d30f6360e89b440b20c7e58c878e9c45f17248", @generic="884644e493272e290908b12788a8ca20f0d007bc0c81840c950f215fc702b7df5244af7ca76f9ddf5d6de6"]}, @typed={0x76, 0x63, 0x0, 0x0, @binary="08362970dbfcafd4529358cb1de9da208668970d32a0581331adc0837aedbd7a0605c10fd6fc69363d2a43a2ea357718145d51755e23ada59146f630b9248291282c8dc3061b718929cf076046dfc3a487579ebdd6c2b3cf61c9464c770589f049009fd34695cb0e959f2d0778a45eb439d8"}, @generic="f25cb895dfeb013368c9ea4579a2f50baf8a83b84fad1f46271b94cffe030d03d38e97249442dcfd64a043f98fe6ea46e1a86efd9d26536d77b225a96d8f56f28ce99928760d4489c5d84ab3e6caf5", @nested={0x44, 0x93, 0x0, 0x1, [@typed={0xe, 0x59, 0x0, 0x0, @str='/dev/ptmx\x00'}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r0}]}, @generic="59ea4b757ed55f535da53d7e45789745ebc82de4863fc425caa77f6c2083987d23b75b41bf301fa5d93ffcc8ebb5bf5d9ed4a06b68209cbebdb3b9dbb08e"]}, 0x41c}, {&(0x7f0000003100)={0x1028, 0x39, 0x4, 0x70bd25, 0x25dfdbfd, "", [@nested={0x1018, 0x44, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @uid}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x2}, @generic="18dfc385ac978227632383d4f5c61ba316572fe0381cdddf456ef3213bff210814c6718d4fe3eb9aa4090d9dddf04cbfa177e09ce3a0b795e774acce9307eae1fc709fc45d9ad59ac0750de008f9f02a6037a9fa28f54f86641f82d884f224e41ecaa012fd9eb323779192391dd880a2308d5d8cb5b32dce8e2aa16022583ca4769ca912f3f03470d18019747f878686db066f5e6f167f54526d4d3a7a956124edcc5e5ebe6432142493553a9f2d1670732dcfb8a867e45a0209d1f7abdb28d3e72d8fb58b85e096f4231c479c40367186c91246880cd19e19a3f8768caa563d76e68b93199de1d99d9ca995c99d5f313171bba718b2cc66b53a746dde13c9d54a893132ba54daa2190b09165c41f363a2d6b685397cf94c6eaf9b885ee5101c43ea9ec4ab46b17d0c4de6977ff038f9f8b02822419fd6475239e8f99e105916aae7f18392ef4f41189fc35aedd92f0576cc6ea2d2606e6432e40950bd065d906e59c78fe56ed7f7f561bda92cf269d609c7382f69f02b9dbd9f08a07da69d59ede47428823ef5db2317a290b0e918cb75b32d5fad9b8c6c9c918396f9a7d64b8b409a012b8b08280e334bde8afa6eb0581c667b46391b2ee47cb4c7e731fa43e6649f76c5af108275d48ee341dd0aeee0ce9939a517c33a813f989b1cfb949417c44857be1f52bc6747887fb651d020e5f552ac16b21a0491f9de69c5e84238712d39a75dd8106b3a55a5dd8e7bd187890365e1c1bcf032a277cd29c66531b0424905af2529d519caf77ecad8969ae7d1d99a05685ba1ac3c6b9e6be254d033567c1b355d615de0019b956a9948ce2040c230bb346501fa034f3861c6f9de47e43a511b3a5488d288b5b9fe17d9a973e89e3affabc24e1c65e883f8a84dfa7e9c7b548813548ad0a6cb3de591ca663fd0ce8158c93ad4dd4fd0e536979acb153c15788bfa83364ce2aa728c8fead23683343bc2f77a126c47900ccfd0aede8c7bf92f6419fa5d92c076b5d19f68d42bd144f05529f37e9fad1734b03c7e81808b89e18d2ad98795ba9ab31822a382709a8622b76e3e73a429b48102141775bded4454111148c73f97e6337d96db58b56640e6e20e413212740b4c50b8b74eb8b519b9f066a253e456bebe6969fcd7b77a548f8ebbf6c8eebdc36d0a752ed311cd5d6cb3a349353f49e5006709418601a4122433e829c7121a7509747d631d18aa71f4ea0f0f081b050d6695a3ba5c811e9abf8a9733a1f681243e17e427f5ed5d8662e5465d3f5a694c8003e9e047f32ec59e9527e99bdc0a8fc4dcf6eae01026c2511347187ced7c132ad30fc7a041e1abb74aec69e86931ecfa2f92ed7a41904ac42031ce7107ce053938c13a84e854b328985445971a32c81732773dc1c10f456d73931fcea1b650a7e5995449f734b9e98e29b74624263e31adbff8ef0db035884d43776682d774920bfc83c8ceda54bf9a4a2c77abbb4cae1baf901f3f1905b6ac921ec4a8e702ef8e2dc3a62f874e525e072adcd423ee5adb65fe91ee7cc2ac4ead0eb32f364642245c454fb80720098365be4dc638274ec64f4c7af72fdeb9810cf8950267c05297ef4eeaa71c0f53b6a70041aa92d2362dfbd46a9fca2349e5b36c4d6bed00ee16ad7e0ec7c6f78ccb41e7097bc608b86257b9149e6f4afafcf784ca9d78a0f95e24c40b21d3567d85784912803db575f1ccee0f847c32c6f29f743b701feaeb12083c6062dfca4a70e37fead7f052fde185bcb82164a83c3cecde163de570ada8fddd7c928f919d36ae67fc1e729c863f80646a860cad44e4125f0428ce98cac197922f7242ebf880c855e3ae13e44463badb0f44c709b8d994a7bf3722701d4e8383bcf1830a5be09f10bd72bf1cb32b0caf4331b969db7d388fbf966fd7067c7ee76e2b759e7a1a8d21b2dce4b848563cd1023dfc5b311acc2dfde5ac6ca4e4a2a801e13715c1c7c23f0b090eb3100b4e3e079fc0d500ba58fae49769513ba029d38ce4f35ab205dc7b5b0a2e5b0a6444818fdc2433ab301476265361c770c1a4debbb9b0937ee226be96e512811476c142dcb593c7418d948065188da34b19ac296f2d1f3bbc5e25406bbc945d02cf39fe29bee942b090cd23da54247155e6c2cdafe7e6023e632687ba20cca94ca493ddeea354e0a4e54e2a5478329c6f960620a64b31c4f7314dfac93514c9c85cae12d4c0bd060c2a4e395db2b34c1c069d3fc363f8efa10c1e2bc1f20039a3958b4544cb36f07eeeff6db274c267014c8056a678eaa2f804347eb3e5d5a184c6756ef51f61feecbd92f4a48a5177c345d9049fdc91bcf67c4743d8b9315b875375c1e71be7eec153e586e7f20cfd423ecef56d8eee133408e434cf0786c32ca09ebbc208a7a0a960138fab9251708066a9943a96fc2db611ee623d5e7ab08dc00e1fd6ea9769158adbbbc1fea5651904c5aceaf9c4e67ee88dd62bf7eac3d047ee17c83a51692170cb73ac58bc8373b04e48c6efb6760df278d79ea15ddcd4ada0d66b1f31e1fe36e8f02433c0c60871689effc1f9d2661d2f61aa922ea78e3c8415a5227ef8b696a6886be820ffdbd1980f75b38b0777efaa39114e04b12ea2c25660280c342c8dea3469a762aee1a07308d7d35dd4262c56fb8b241049a682b1eaddb3252f860a6438a7827e9f631c59a4e1380b597fb41376a3b76e95da7e21e94866e649958b24067bfa2a4fa90bd731b26b2642ce6164a3f8a70ec0294fee122626f8c9906d97a3cb3fdf8d3fab880de738a721bb3681c66b8f4a9ac7bc38acd137f22e48833eec47eaca1e95306810000e005830d7c9e6c5cfb2b6706842cc4cabcec5a1d6e2726e94482663fa1a7afbbc95036efdeb267edbb4c7e7b831dd24ea2362a621689e2a0069cd9e788b5b8f1bb2b0c324f57fd537b4d53dc9b4455392893a5ffb9e947938357ac13a65f442c45e3a57dcd71145ff4522cf15d0c1ce5ef63b984512848e35bf5a98f170723d472a4b985215a5553651af52747e61ab2bb401b97557ab74bec180dfaca357350e781d61d4042d6dbc4c47fc122f2d659e3f1783ceee702856048b9b77bde54d41568756b3b7e5f97c34cee434501bfde95ba530cece1617bb0e100da9a6958b11c9f0cec5eb4b89a0e06354b4197d2c483793df4d2b2650bd060edfa1c1d88862f3e9aa8fc617a6794552720af1502be7fcc2ac165eb1d9d2ccf4f53f5daf5b3abf03cd850bb279f55775c602b5dd83a35c3e63828c97b8cf4c342e904c6b742118da749483a6fda5b0f78dac9862462784c73b9fe0b67d7b9ccdd902769f3e18790723edd2c98c63fb06c1af512d2f932d7faa224f836a0183b8d21d5d96b184d4032d101cb126eb12930738c8db916f28298180433ad815fc5921ba127d23a4fd1a1ee9d6023da36550bc64c2497ab3072eb3075c6f158dbc27189421a4e1f0a6b6072d07ffbe2d08332e5ece1d0d5975831541e8208d5c2a156e573c27ef5abd82d287ca5a3b2804b593be948348b1414ffa32fd93ce08404480ae59fab538a1b648f2c3ceddbf52e08c008a0a3e6eac8874ce964212d0c9ee5d493ca4bb5229cb2310ba5758e892f643e35284d5540450706529d6f1598396204f0f9c162bc51775e548f826036914f0673c1da3674f605db381cb90c8c34527f5bd9870467fb59f0585a5852f310d361bcfc24a0cdd1ade0560405dd58a5f00dc2a4de9c4979c7c9649ce5f1ec96b7004fb8280d5e77b2596af47b290b8b10c939457f64420ec4e76ff19728dea3a22d6ff6610addf5d16bc7d503a731d268a2159050dd8ee5e0b8b19a16f5ab08b3de856f003d72c3ffb1ab296357e87a1249ed10b6538a50dd52be63e57de0b7c8aedb9e852a45c77f72a323e18fca8e4623616c992c1cea323fe606b4f1a4f3c56afdbbe99f45025843662ec25e14bee5849e5d74b95f6033c2bb48fbe469eae23ad65398d17f85a99f226d11367f99f9fe978dd959f44d2155cb1b377d2bcd84b3acc3be54dbfa465a10b99b52c1149b5b23fc5809650faf024ca2745d51b36501946e8806c082bccfeb65f775224264d93ca2bfd0910aaa0e9b7da36b44a5061b6baaef14603fa1e092d029dab52f8fbbd706fa399af5b10a93cadec6287455ea4f5db7f7b0b5b8b2f2d7d940f5bc33c99753d7e8ab5024be8860ab43679dfd6dc4f88983b5899815b0e83a3f21383a89b7e0874d8db5a5018cbd98148128fdaec79627b8d61278e1966bf5354372d379d6bdd8c4fbf7b60ce2c70e27e4c6449247f917d99f082aa806e75f90b4168d17753bdaf3fab57538c3621192d147a4d2667f331c0180b44254c41ece85b0d0660d555944b99cae2634c62f9181c8c5e336dc18fd7ee3e0513ef7fbcb7163d86a434827487030797296fe859080d9d4a40bc7d342d1ec4c88766dcf80ec478808cbd023baa382c3c86550e480a48680aa017a07f01598110c9bfa933ba4b6b9f7153d0d9b65e79df6701540506bf435f38db13d6f3f90c0e9175cd76b0a8ae3b1b3d6522fe31ab6011d4b2adc51d91df0c5bbf4a5ba59308ab29e3df3e967abb002a394d2fd7d530ca296ea16c5d8487a31dffdd5c5301f0005f7e693af91f226e4470a69b79b09e8d32d84d3e8e5a0336037b8b6cadd538de1e67e3ffa5d786a2298d696cf8fb0dc421ddd0aa977f5028675794db7fa67205226ba0a1cf38181e32cc2bd7ceee372b63a420f865e6fbc04827f9f0c291f415a2655fa1fd7ec375fdff825d7a123d657e3f990bf36ced6263ce77c4ac883efa1594caa4f766e62f1807132b305bf07d16252297bce726e5c64b193405d11e6358697641aae852837dad3fc3d36edec17d367bf09296a56cad391d995bc31aea01b781164f75f59efe5ca927edea30d8b9bba391e7f9c88204bdd22b2afda916704c05d2ec6b25a93858c85b05457cc08560982a8ff83175ae1b7f502af6de5ecdc61af4645941f813c1988db763aa2dad4ce0f08058c4184ac3ecb2f604dfcb0bc7e8a802cbf379748105406ff8bdbee8d39d5ddf7cb4d52ac2c8c2057a561c47c5d0e42d3f1acf30dc2f6f35cfbe3edea4b4b230a9259281ad598dfe5c089deab7f857259c83669dd577b86c225f218584e4ac0646a342067b9972e02593abdb784bdb73c5e4411f120e221b0014751b2fc2de1e448d4d224ac82c3675803cbf030d7ea5c247fc3b5b96b3ffe7356bc5528192ce081cbf440d852e02d881ce4039ee922d193adaef21c021a1f2ec8ad35abf8eb399b5b11c3389c8ebb67197b5b2ca670a6785858440680a576784ff25b9574e3af70b3c4ab75a22dc150f3c69b81ae4952f69854588d1ddca095ee0b2d2cdd938c4921d0beab49299c6f420fb24fd899fbb73017e6cc21d5e5616b47eb98d0639e1d74f38bfdcabd377a3e7a2c71133d79a7cde0f77f2a0973545808ae9312e68b5e338cf0e39827126cf1ebc48dfaed2531769032749d33d9dea3a7637f587b229d386e22941248da4007e8869848a838de8ccd070e7926eeee9b589ab22e25ac4ed4c98b3ed8dc98d0537e0bcd091173763bf194e21961a6ea0e3e1dffb7364a0829023344c5844f3fdd7d124f47e11917e1abec76b0041403e000dda45e2fe1a7b9da866e56da9dfec021e9dffb7f49ac9cdb92f5eba23dc3388bcd849864f314d4cd19e746ddc75cadc689bfa01378d7a89ea8a7b2e91bbd78c73e5a8ac7a3b9b16be63212da1e4f45f9833e81d4f2e629179b511a27cca9eaedb9eb6e482673e78bf5197ed", @typed={0x4, 0x2}]}]}, 0x1028}], 0x3, &(0x7f00000043c0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x80, 0x4000000}, 0x20040000) r3 = gettid() r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f00000001c0)=""/30, 0x1e}], 0x5, 0xb93d, 0xfffffff7) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1650.572221][ T3418] loop3: p5 start 225 is beyond EOD, truncated [ 1650.602683][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1650.619003][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1650.619941][ T3432] loop4: detected capacity change from 0 to 1 [ 1650.627610][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1650.637965][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1650.646032][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1650.654417][ T3445] serio: Serial port pts0 [ 1650.671578][ T3418] loop3: detected capacity change from 0 to 1 [ 1650.708434][ T3418] loop3: p2 < > p3 p4 < p5 > [ 1650.713510][ T3418] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.728113][ T3418] loop3: p3 start 225 is beyond EOD, truncated [ 1650.734331][ T3418] loop3: p4 size 2 extends beyond EOD, truncated [ 1650.762489][ T3418] loop3: p5 start 225 is beyond EOD, truncated 10:51:30 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0400ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:30 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0) 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000007a0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) getpid() r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) clone3(&(0x7f00000003c0)={0x10000a500, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x26}, &(0x7f00000002c0)=""/77, 0x4d, &(0x7f0000000340)=""/14, &(0x7f0000000380)=[r0, r0], 0x2}, 0x58) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) r4 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xff, 0x1f, 0x1, 0x1, 0x0, 0x100000000, 0xc0400, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x4}, 0x501, 0xffffffff00000000, 0x3, 0x1, 0x80, 0xfa, 0x9, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ptrace$setregs(0xf, r0, 0x100000000, &(0x7f0000000440)="d9137526f9d85519d7d5f2b12af0cb65d895737b8ae9ead368ca2cefd6dcfb55f8979e726430c69c3e4dad028a49a24ec03ebbcbc15298dac658ba01f969790e871c7f4d714b57c7c80bb416c27d8c293eab77739a5f7cede9bb32cca61bb140ec7b5b1580bcfcab291dcd8f66e896263b468cc304389bb6e0de1091d62d362bf54f77") [ 1650.818034][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1650.824525][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1650.860281][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1650.866519][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1650.884085][ T3473] serio: Serial port pts0 [ 1650.890922][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1650.897553][ T3475] loop4: detected capacity change from 0 to 1 10:51:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1650.973059][ T3489] loop3: detected capacity change from 0 to 1 [ 1650.988935][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1650.993813][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.004756][ T3475] loop4: detected capacity change from 0 to 1 [ 1651.014690][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.020924][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.035502][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1651.043168][ T3489] loop3: p2 < > p3 p4 < p5 > [ 1651.048442][ T3489] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.056248][ T3489] loop3: p3 start 225 is beyond EOD, truncated [ 1651.062485][ T3489] loop3: p4 size 2 extends beyond EOD, truncated 10:51:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000900000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) [ 1651.085635][ T3489] loop3: p5 start 225 is beyond EOD, truncated [ 1651.093113][ T3473] serio: Serial port pts0 [ 1651.122825][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.134509][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.142300][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.148602][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.159367][ T3489] loop3: detected capacity change from 0 to 1 [ 1651.159908][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1651.179386][ T3532] loop4: detected capacity change from 0 to 1 [ 1651.201100][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1651.210109][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.220241][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1651.226456][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1651.233769][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1651.241967][ T3489] loop3: p2 < > p3 p4 < p5 > [ 1651.247427][ T3489] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.255948][ T3489] loop3: p3 start 225 is beyond EOD, truncated [ 1651.262402][ T3489] loop3: p4 size 2 extends beyond EOD, truncated [ 1651.269555][ T3489] loop3: p5 start 225 is beyond EOD, truncated [ 1651.286570][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.291574][ T1038] loop2: p2 size 2 extends beyond EOD, truncated 10:51:31 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0500ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:31 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000380)=@can, 0x80, 0x0}}], 0x1, 0x0) 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x9) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000140)={0x0, 0x33, 0x0, @tid=r0}, &(0x7f0000000080)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 10:51:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000fffe0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1651.298779][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.305046][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.312304][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:31 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) 10:51:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() syz_open_pts(r2, 0x544502) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) [ 1651.368053][ T3562] loop4: detected capacity change from 0 to 1 10:51:31 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0x0) unshare(0x20000400) select(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f00000000c0)={0x8}, 0x0) [ 1651.444955][ T3579] serio: Serial port pts0 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000fff0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1651.493967][ T3584] loop3: detected capacity change from 0 to 1 [ 1651.513236][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.524183][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.535016][ T3598] loop4: detected capacity change from 0 to 1 [ 1651.535032][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.547609][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.555103][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1651.557554][ T3584] loop3: p2 < > p3 p4 < p5 > [ 1651.572875][ T3584] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.588747][ T3584] loop3: p3 start 225 is beyond EOD, truncated [ 1651.595145][ T3584] loop3: p4 size 2 extends beyond EOD, truncated [ 1651.602546][ T3584] loop3: p5 start 225 is beyond EOD, truncated [ 1651.627340][ T3598] loop4: detected capacity change from 0 to 1 [ 1651.641151][ T3584] loop3: detected capacity change from 0 to 1 [ 1651.653105][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.658909][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.665843][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.672423][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.679484][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1651.697538][ T3584] loop3: p2 < > p3 p4 < p5 > [ 1651.702754][ T3584] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.718391][ T3584] loop3: p3 start 225 is beyond EOD, truncated [ 1651.724693][ T3584] loop3: p4 size 2 extends beyond EOD, truncated [ 1651.732766][ T3584] loop3: p5 start 225 is beyond EOD, truncated 10:51:31 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0600ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:31 executing program 0: futex(&(0x7f0000000040), 0x1, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) 10:51:31 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:31 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff850008000000feff0000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') [ 1651.808825][ T3637] loop4: detected capacity change from 0 to 1 [ 1651.832021][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.836819][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.867938][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.874157][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.883318][ T3655] loop3: detected capacity change from 0 to 1 [ 1651.891228][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1651.917502][ T3655] loop3: p2 < > p3 p4 < p5 > [ 1651.922485][ T3655] loop3: p2 size 2 extends beyond EOD, truncated [ 1651.924821][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1651.932051][ T3655] loop3: p3 start 225 is beyond EOD, truncated [ 1651.934286][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1651.940632][ T3655] loop3: p4 size 2 extends beyond EOD, truncated [ 1651.948685][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1651.960326][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1651.967719][ T3655] loop3: p5 start 225 is beyond EOD, truncated [ 1651.968495][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1652.021889][ T3655] loop3: detected capacity change from 0 to 1 [ 1652.048384][ T3655] loop3: p2 < > p3 p4 < p5 > [ 1652.061220][ T3655] loop3: p2 size 2 extends beyond EOD, truncated [ 1652.068690][ T3655] loop3: p3 start 225 is beyond EOD, truncated [ 1652.075043][ T3655] loop3: p4 size 2 extends beyond EOD, truncated [ 1652.082456][ T3655] loop3: p5 start 225 is beyond EOD, truncated [ 1652.148608][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1652.153795][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1652.162154][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1652.168407][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1652.175510][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() timer_create(0x5, &(0x7f0000000140)={0x0, 0x25, 0x2, @tid=r3}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000300)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000740)={0x1, 0x0, 0xa, 0x1, 0xbf, &(0x7f0000000340)}) 10:51:32 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000200024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xb4, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0xc80, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0xc6c, 0x4, 0x0, 0x1, [{0xfc, 0x1, 0x0, 0x1, [@meta={{0x9}, @void}, @exthdr={{0xb}, @void}, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8}]}}, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}]}, {0xb6c, 0x1, 0x0, 0x1, [@dup={{0x8}, @void}, @fwd={{0x8}, @void}, @limit={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_RATE={0xc}]}}, @range={{0xa}, @val={0xb00, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xec, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "bcff3f05216061de3573e08cb83a850f8869f347d00c7648613b3e3f181d754d02fd5790e5ceed1cebbd2d8e8786a89f99c0e75ce0df0855e4263f4616ee93e8922d9cd05c825e2c1f2ab23c9586fc98079616b2b599816605375870914cbe624da9cdb1543f3ce93727526ca1e6902942e7ece387e42298f9b4c6dbaecfa5c030110b764dba40628cd8f35e54fba9a4981cd15af32425b2a47d9f2665aac3b3434bf55d8c98a64d2d77521201253339a2ddcdaf469208af9fd8e4fbe111c393988ad3d76316664376c45f549225c26e596b9e181a74ab755ae0217fe9ac8cb1eb"}]}, @NFTA_RANGE_FROM_DATA={0xa10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "dd5ea0a99b47627a8f8235f59e8d6473c8ffc6b20a43c297bfcdb20e16c3f08c61ee68198b7a45a608bb60e3c67604dd607a9a22268893190d76894aab5b5de7f3a1caeb26b3567aa1d44793dc1f8bd7cca860febd91ebc550538e2b97828741fbe1af199150b8c16fcff436bcca9f2d3de4a60360d77caa50cc5e6ffd868759345a0bd43ea86d6ecb41118ddb9f0924cc3cb3deb0f503ab7f"}, @NFTA_DATA_VALUE={0x969, 0x1, "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"}]}]}}]}]}]}], {0x14}}, 0xec4}}, 0x0) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:32 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x8f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:32 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0700ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:32 executing program 0: epoll_create(0x7fffffff) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1652.329720][ T3692] loop4: detected capacity change from 0 to 1 [ 1652.347103][ T3696] loop3: detected capacity change from 0 to 1 [ 1652.348630][ T3697] serio: Serial port pts0 10:51:32 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000800024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1652.385786][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1652.391822][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1652.399767][ T3696] loop3: p2 < > p3 p4 < p5 > [ 1652.404992][ T3696] loop3: p2 size 2 extends beyond EOD, truncated [ 1652.408733][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1652.417804][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1652.426092][ T3712] serio: Serial port pts1 10:51:32 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:32 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x2) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1652.440147][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1652.444509][ T3696] loop3: p3 start 225 is beyond EOD, truncated [ 1652.453034][ T3696] loop3: p4 size 2 extends beyond EOD, truncated [ 1652.457928][ T3720] loop4: detected capacity change from 0 to 1 [ 1652.478997][ T3696] loop3: p5 start 225 is beyond EOD, truncated 10:51:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)="ec53bc40", 0x4) 10:51:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0xfffffffc) madvise(&(0x7f0000360000/0x4000)=nil, 0x4000, 0xa) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r4 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) tkill(r4, 0x1000000000013) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x5, 0x1, 0x8, 0x1f, 0x7, 0x27c, 0x6, 0x8da, 0x6}, 0x0) [ 1652.521150][ T3735] serio: Serial port pts1 10:51:32 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1652.554867][ T3739] serio: Serial port pts0 [ 1652.557294][ T3720] loop4: detected capacity change from 0 to 1 [ 1652.571372][ T3696] loop3: detected capacity change from 0 to 1 [ 1652.582412][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1652.587424][ T1038] loop2: p2 size 2 extends beyond EOD, truncated 10:51:32 executing program 0: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0xc08784f5a09e3293) [ 1652.615792][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1652.622141][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1652.628995][ T3696] loop3: p2 < > p3 p4 < p5 > [ 1652.633215][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1652.633882][ T3696] loop3: p2 size 2 extends beyond EOD, truncated [ 1652.661965][ T3766] serio: Serial port pts1 [ 1652.668001][ T3696] loop3: p3 start 225 is beyond EOD, truncated [ 1652.674196][ T3696] loop3: p4 size 2 extends beyond EOD, truncated [ 1652.681847][ T3696] loop3: p5 start 225 is beyond EOD, truncated 10:51:32 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0800ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:32 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000040000800024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00'}) 10:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) [ 1652.712100][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1652.718028][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1652.725517][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1652.731738][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1652.754190][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:32 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1652.766860][ T3789] loop4: detected capacity change from 0 to 1 [ 1652.789632][ T3796] serio: Serial port pts1 [ 1652.795131][ T3799] loop3: detected capacity change from 0 to 1 [ 1652.812126][ T1038] loop2: p2 < > p3 p4 < p5 > 10:51:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000004}) [ 1652.820790][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1652.839606][ T3799] loop3: p2 < > p3 p4 < p5 > [ 1652.846790][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1652.846873][ T3799] loop3: p2 size 2 extends beyond EOD, [ 1652.853322][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1652.865449][ T3799] truncated 10:51:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') [ 1652.870796][ T3799] loop3: p3 start 225 is beyond EOD, truncated [ 1652.877030][ T3799] loop3: p4 size 2 extends beyond EOD, truncated [ 1652.880044][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1652.888076][ T3799] loop3: p5 start 225 is beyond EOD, truncated [ 1652.902610][ T3789] loop4: detected capacity change from 0 to 1 10:51:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:33 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x0, 0x0) [ 1652.922142][ T3825] serio: Serial port pts0 [ 1652.946003][ T3799] loop3: detected capacity change from 0 to 1 [ 1652.973566][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1652.987920][ T3799] loop3: p2 < > p3 p4 < p5 > 10:51:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:33 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000004000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1652.989164][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1652.995408][ T3799] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.024926][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1653.031185][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1653.033198][ T3848] loop4: detected capacity change from 0 to 1 [ 1653.044251][ T3799] loop3: p3 start 225 is beyond EOD, truncated [ 1653.044340][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1653.050478][ T3799] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.053986][ T3799] loop3: p5 start 225 is beyond EOD, truncated [ 1653.077970][ T3856] serio: Serial port pts0 10:51:33 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0900ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:33 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000080) 10:51:33 executing program 0: clock_gettime(0x0, &(0x7f0000009840)) 10:51:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1653.120776][ T3848] loop4: detected capacity change from 0 to 1 [ 1653.132854][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1653.138553][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1653.159343][ T1038] loop2: p3 start 225 is beyond EOD, truncated 10:51:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x0) 10:51:33 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000007c0)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) 10:51:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:33 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 10:51:33 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000009000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1653.165568][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1653.185421][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1653.233769][ T3886] loop3: detected capacity change from 0 to 1 [ 1653.234904][ T3885] serio: Serial port pts0 10:51:33 executing program 1: keyctl$instantiate_iov(0x12, 0x0, 0x0, 0x0, 0x0) [ 1653.282602][ T3886] loop3: p2 < > p3 p4 < p5 > [ 1653.287863][ T3886] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.300542][ T3903] loop4: detected capacity change from 0 to 1 [ 1653.313663][ T3886] loop3: p3 start 225 is beyond EOD, truncated [ 1653.319912][ T3886] loop3: p4 size 2 extends beyond EOD, truncated 10:51:33 executing program 0: keyctl$instantiate_iov(0x2, 0x0, 0x0, 0x10, 0x0) [ 1653.330122][ T3886] loop3: p5 start 225 is beyond EOD, truncated [ 1653.342487][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1653.347499][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.354564][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1653.360920][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.368834][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1653.417984][ T3886] loop3: detected capacity change from 0 to 1 [ 1653.425847][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1653.431309][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1653.432310][ T3903] loop4: detected capacity change from 0 to 1 [ 1653.439070][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1653.450425][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1653.457917][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1653.463482][ T3886] loop3: p2 < > p3 p4 < p5 > [ 1653.469927][ T3886] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.477309][ T3886] loop3: p3 start 225 is beyond EOD, truncated [ 1653.483564][ T3886] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.491053][ T3886] loop3: p5 start 225 is beyond EOD, truncated 10:51:33 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0a00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='?'], 0x14}}, 0x0) 10:51:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 10:51:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:33 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000001024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1653.539485][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1653.544411][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.563870][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1653.570242][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.582516][ T3948] loop4: detected capacity change from 0 to 1 10:51:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:33 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "eb0a6ac5d63eb43bf482cc170c9c01ad0e818ebe98a4599db1eb6da594529d2f7e723d79e8206cf7c7cb823e57c602f371dc3787af064117c0a475e1ac8c1995"}, 0x48, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 10:51:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4008012, r0, 0x8000000) [ 1653.582602][ T3944] serio: Serial port pts0 [ 1653.593764][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401}, 0x14}}, 0x0) 10:51:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1653.659092][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1653.664683][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1653.672344][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1653.678849][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1653.706601][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1653.706794][ T3976] loop3: detected capacity change from 0 to 1 [ 1653.721188][ T3948] loop4: detected capacity change from 0 to 1 [ 1653.797529][ T3976] loop3: p2 < > p3 p4 < p5 > [ 1653.802389][ T3976] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.810698][ T3976] loop3: p3 start 225 is beyond EOD, truncated [ 1653.816916][ T3976] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.825201][ T3976] loop3: p5 start 225 is beyond EOD, truncated [ 1653.869805][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1653.870546][ T3976] loop3: detected capacity change from 0 to 1 [ 1653.875083][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1653.888772][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1653.895081][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1653.901982][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1653.917639][ T3976] loop3: p2 < > p3 p4 < p5 > [ 1653.923994][ T3976] loop3: p2 size 2 extends beyond EOD, truncated [ 1653.931259][ T3976] loop3: p3 start 225 is beyond EOD, truncated [ 1653.937637][ T3976] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.944425][ T3976] loop3: p5 start 225 is beyond EOD, truncated [ 1653.952378][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1653.957581][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:51:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 10:51:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:34 executing program 0: io_setup(0xc, &(0x7f0000000200)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000240)}]) 10:51:34 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0b00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:34 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000002024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1653.964734][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1653.970945][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1653.977908][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000009f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12100, 0x0) 10:51:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x0, 0x1}}) [ 1654.025965][ T4021] serio: Serial port pts0 [ 1654.027869][ T4026] loop4: detected capacity change from 0 to 1 [ 1654.031343][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1654.047256][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.054244][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1654.060852][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.069484][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000002c0)='L', 0x1}], 0x2}], 0x1, 0x0) 10:51:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1654.110798][ T4042] loop3: detected capacity change from 0 to 1 [ 1654.119133][ T4026] loop4: detected capacity change from 0 to 1 10:51:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080), &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:34 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000402024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1654.165756][ T4042] loop3: p2 < > p3 p4 < p5 > [ 1654.171062][ T4042] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.190514][ T4042] loop3: p3 start 225 is beyond EOD, truncated [ 1654.196821][ T4042] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.204816][ T4042] loop3: p5 start 225 is beyond EOD, truncated [ 1654.237379][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1654.253003][ T4074] serio: Serial port pts0 [ 1654.259047][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1654.260966][ T4080] loop4: detected capacity change from 0 to 1 10:51:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9a00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}) [ 1654.287746][ T4042] loop3: detected capacity change from 0 to 1 [ 1654.299862][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1654.306078][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1654.322086][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1654.329281][ T4042] loop3: p2 < > p3 p4 < p5 > [ 1654.334847][ T4042] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.342755][ T4080] loop4: detected capacity change from 0 to 1 [ 1654.350526][ T4042] loop3: p3 start 225 is beyond EOD, truncated [ 1654.356746][ T4042] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.364251][ T4042] loop3: p5 start 225 is beyond EOD, truncated [ 1654.373123][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1654.379489][ T1038] loop3: p2 size 2 extends beyond EOD, truncated 10:51:34 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0c00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 10:51:34 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "eb0a6ac5d63eb43bf482cc170c9c01ad0e818ebe98a4599db1eb6da594529d2f7e723d79e8206cf7c7cb823e57c602f371dc3787af064117c0a475e1ac8c1995"}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "eb0a6ac5de3eb43b1483cc170c9c0000000000000003599db1eb6da594529d2f7e72000000e82117c0a475e1ac8c199500"}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) 10:51:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9b00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:34 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000003024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1654.387603][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1654.393788][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.401456][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:34 executing program 0: r0 = syz_io_uring_setup(0x78f9, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f0000000400)=""/4096, 0x1000}, {0x0}], 0x3) [ 1654.452134][ T4116] loop4: detected capacity change from 0 to 1 10:51:34 executing program 1: syz_io_uring_setup(0xe80, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0xff7ffffc, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 10:51:34 executing program 0: io_uring_setup(0x1e65, &(0x7f0000000100)) [ 1654.511939][ T4134] loop3: detected capacity change from 0 to 1 [ 1654.560505][ T4116] loop4: detected capacity change from 0 to 1 [ 1654.568661][ T4134] loop3: p2 < > p3 p4 < p5 > [ 1654.573726][ T4134] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.581854][ T4134] loop3: p3 start 225 is beyond EOD, truncated [ 1654.588097][ T4134] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.595039][ T4134] loop3: p5 start 225 is beyond EOD, truncated [ 1654.649289][ T4134] loop3: detected capacity change from 0 to 1 [ 1654.712874][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1654.717828][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.724857][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1654.731160][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.738060][ T1038] loop3: p5 start 225 is beyond EOD, truncated [ 1654.746284][ T4134] loop3: p2 < > p3 p4 < p5 > [ 1654.751560][ T4134] loop3: p2 size 2 extends beyond EOD, truncated [ 1654.759148][ T4134] loop3: p3 start 225 is beyond EOD, truncated [ 1654.765724][ T4134] loop3: p4 size 2 extends beyond EOD, truncated [ 1654.773025][ T4134] loop3: p5 start 225 is beyond EOD, truncated 10:51:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080), &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:37 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "eb0a6ac5d63eb43bf482cc170c9c01ad0e818ebe98a4599db1eb6da594529d2f7e723d79e8206cf7c7cb823e57c602f371dc3787af064117c0a475e1ac8c1995"}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, r0, 0xfffffffffffffffc) 10:51:37 executing program 0: mknod(&(0x7f00000001c0)='\x00', 0x0, 0x0) 10:51:37 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9c00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:37 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000004024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:37 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0d00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:37 executing program 1: socket(0x25, 0x3, 0x65c0b3de) [ 1657.246918][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1657.251812][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1657.276097][ T4184] loop3: detected capacity change from 0 to 1 [ 1657.282955][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1657.289275][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0}], 0x1, 0x801) [ 1657.296202][ T4186] loop4: detected capacity change from 0 to 1 [ 1657.305747][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1657.317582][ T4184] loop3: p2 < > p3 p4 < p5 > [ 1657.322460][ T4184] loop3: p2 size 2 extends beyond EOD, truncated 10:51:37 executing program 1: socket(0x25, 0x3, 0x0) 10:51:37 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9d00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1657.349605][ T4184] loop3: p3 start 225 is beyond EOD, truncated [ 1657.351762][ T4202] serio: Serial port pts0 [ 1657.357638][ T4184] loop3: p4 size 2 extends beyond EOD, truncated [ 1657.372063][ T4184] loop3: p5 start 225 is beyond EOD, truncated 10:51:37 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0e00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f00000022c0), &(0x7f0000002300), &(0x7f0000002340)={0x0, "cef3d55015d9ab31ed3ec1f7dbabc7b44fcceff249a60e283201de9280428960e07a3f414c0bb86e525e21f82ef40e0c67c3189134dd7c7495eca4cf836aead8"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000024c0), 0x0, 0x0, 0x0, r1) [ 1657.423244][ T4186] loop4: detected capacity change from 0 to 1 [ 1657.472124][ T4228] loop3: detected capacity change from 0 to 1 [ 1657.519422][ T4228] loop3: p2 < > p3 p4 < p5 > [ 1657.524468][ T4228] loop3: p2 size 2 extends beyond EOD, truncated [ 1657.532030][ T4228] loop3: p3 start 225 is beyond EOD, truncated [ 1657.538609][ T4228] loop3: p4 size 2 extends beyond EOD, truncated [ 1657.545610][ T4228] loop3: p5 start 225 is beyond EOD, truncated [ 1657.601679][ T4228] loop3: detected capacity change from 0 to 1 [ 1657.667693][ T4228] loop3: p2 < > p3 p4 < p5 > [ 1657.673082][ T4228] loop3: p2 size 2 extends beyond EOD, truncated [ 1657.680663][ T4228] loop3: p3 start 225 is beyond EOD, truncated [ 1657.687003][ T4228] loop3: p4 size 2 extends beyond EOD, truncated [ 1657.693734][ T4228] loop3: p5 start 225 is beyond EOD, truncated 10:51:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080), &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:40 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000005024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:40 executing program 1: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, "f134c43868d6d480923c4331df28067ed993dfedbf1c68f8a4464bc1562c73bffe757722f46be4dae72dd22bdc1ff2436a34f97012faabf88b7c48a1a0468789"}, 0x48, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 10:51:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:40 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9e00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:40 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0f00ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000003a40)={0x0, 0x0, 0x0}, 0x0) [ 1660.355399][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1660.360363][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1660.383142][ T4262] loop3: detected capacity change from 0 to 1 [ 1660.389850][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1660.396078][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1660.402252][ T4267] loop4: detected capacity change from 0 to 1 [ 1660.404222][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1660.436387][ T4282] serio: Serial port pts0 [ 1660.442425][ T4262] loop3: p2 < > p3 p4 < p5 > [ 1660.448448][ T4262] loop3: p2 size 2 extends beyond EOD, truncated 10:51:40 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0x9f00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 1660.461490][ T4262] loop3: p3 start 225 is beyond EOD, truncated [ 1660.467756][ T4262] loop3: p4 size 2 extends beyond EOD, truncated [ 1660.485303][ T4267] loop4: detected capacity change from 0 to 1 [ 1660.495510][ T4262] loop3: p5 start 225 is beyond EOD, truncated 10:51:40 executing program 0: r0 = syz_io_uring_setup(0x1b8, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 10:51:40 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:51:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 1660.613602][ T4262] loop3: detected capacity change from 0 to 1 10:51:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, 0x0) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, 0x0) 10:51:43 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000006024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa000, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:43 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:51:43 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac1000ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 1663.438135][ T4331] loop3: detected capacity change from 0 to 1 [ 1663.445521][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1663.452524][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1663.460854][ T4338] loop4: detected capacity change from 0 to 1 [ 1663.468550][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1663.474776][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:43 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 10:51:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8970, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 1663.487168][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1663.513036][ T4331] loop3: p2 < > p3 p4 < p5 > [ 1663.518046][ T4331] loop3: p2 size 2 extends beyond EOD, truncated [ 1663.525150][ T4350] serio: Serial port pts0 [ 1663.539509][ T4331] loop3: p3 start 225 is beyond EOD, truncated [ 1663.545858][ T4331] loop3: p4 size 2 extends beyond EOD, truncated 10:51:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa100, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:43 executing program 0: syz_io_uring_setup(0x18be, &(0x7f0000000000)={0x0, 0xfeaa, 0xf, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 10:51:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x28}}, 0x0) [ 1663.561221][ T4331] loop3: p5 start 225 is beyond EOD, truncated [ 1663.581849][ T4338] loop4: detected capacity change from 0 to 1 [ 1663.639137][ T4331] loop3: detected capacity change from 0 to 1 [ 1663.667598][ T4331] loop3: p2 < > p3 p4 < p5 > [ 1663.672660][ T4331] loop3: p2 size 2 extends beyond EOD, truncated [ 1663.680037][ T4331] loop3: p3 start 225 is beyond EOD, truncated [ 1663.686459][ T4331] loop3: p4 size 2 extends beyond EOD, truncated [ 1663.697575][ T4331] loop3: p5 start 225 is beyond EOD, truncated 10:51:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, 0x0, &(0x7f0000000240)) 10:51:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'veth1_to_team\x00', &(0x7f0000005600)=@ethtool_drvinfo={0x3, "445fc2ec4cf9d55c98f74b9342906ea2512bb334ae87395d8f86208aa97fffd0", "94881201092484accdb7f82b08fa8279a14e6aed2204a28ceae8276ef6006098", "249ba843bd01bfb7f7b9f444e70982e7e39cb641cfed481364c25a3743838529", "8377a10ad50e06a38ac7aa229ee3b630c234b4c5e7c22cbd638fbd837953843e", "ab424f76984f496b223a72802c2249fab98ae23f0f7c3cf302997f6bd92e9e0c", "08b6e8e43020e37a75bd0605"}}) 10:51:46 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000406024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, 0x0) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:46 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa200, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:46 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac1100ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:51:46 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x2, 0x41, "e7c6eace759f8dbdb1d422c394d65c2d7474c5b3c88106e994d3fefb038face544e45e9d1de5d8c2158653bff27309a30df4f61a22901fcd9c49072988d1a218a3"}) [ 1666.517277][ T4401] loop3: detected capacity change from 0 to 1 [ 1666.524669][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1666.529790][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1666.536542][ T4411] loop4: detected capacity change from 0 to 1 [ 1666.545306][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1666.551619][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1666.560307][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x714d93e2505afbb2, 0xffffffffffffffff, 0x8000000) 10:51:46 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000007024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1666.582857][ T4401] loop3: p2 < > p3 p4 < p5 > [ 1666.588154][ T4401] loop3: p2 size 2 extends beyond EOD, truncated [ 1666.606055][ T4401] loop3: p3 start 225 is beyond EOD, truncated [ 1666.611230][ T4426] serio: Serial port pts0 [ 1666.612560][ T4401] loop3: p4 size 2 extends beyond EOD, truncated 10:51:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b40, 0x0) 10:51:46 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa300, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1666.649720][ T4401] loop3: p5 start 225 is beyond EOD, truncated 10:51:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xd9f, 0x0) r0 = syz_io_uring_setup(0x3b5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x9}, 0x0, 0x1, r3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 10:51:46 executing program 0: r0 = syz_io_uring_setup(0x143d, &(0x7f0000000180)={0x0, 0x4e3d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r1, 0x1) [ 1666.707940][ T4444] loop4: detected capacity change from 0 to 1 [ 1666.727802][ T4401] loop3: detected capacity change from 0 to 1 [ 1666.787843][ T4401] loop3: p2 < > p3 p4 < p5 > [ 1666.793349][ T4401] loop3: p2 size 2 extends beyond EOD, truncated [ 1666.801448][ T4401] loop3: p3 start 225 is beyond EOD, truncated [ 1666.807732][ T4401] loop3: p4 size 2 extends beyond EOD, truncated [ 1666.814497][ T4401] loop3: p5 start 225 is beyond EOD, truncated [ 1666.836004][ T4444] loop4: detected capacity change from 0 to 1 10:51:49 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac1200ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000025c0)=""/222, 0xde) 10:51:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, 0x0) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa400, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:49 executing program 0: add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) fork() 10:51:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000008024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1669.602220][ T4482] loop4: detected capacity change from 0 to 1 [ 1669.612154][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1669.617112][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1669.626507][ T4490] loop3: detected capacity change from 0 to 1 [ 1669.635271][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1669.641646][ T1038] loop2: p4 size 2 extends beyond EOD, truncated 10:51:49 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0) [ 1669.649800][ T4492] serio: Serial port pts0 [ 1669.650032][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1669.664455][ T4490] loop3: p2 < > p3 p4 < p5 > [ 1669.669880][ T4490] loop3: p2 size 2 extends beyond EOD, truncated [ 1669.677923][ T4490] loop3: p3 start 225 is beyond EOD, truncated [ 1669.678161][ T4482] loop4: detected capacity change from 0 to 1 [ 1669.684188][ T4490] loop3: p4 size 2 extends beyond EOD, truncated 10:51:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 10:51:49 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa500, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) [ 1669.697752][ T4490] loop3: p5 start 225 is beyond EOD, truncated 10:51:49 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "eb0a6ac5d63eb43bf482cc170c9c01ad0e818ebe98a4599db1eb6da594529d2f7e723d79e8206cf7c7cb823e57c602f371dc3787af064117c0a475e1ac8c1995"}, 0x48, 0xfffffffffffffffb) 10:51:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff85000800000000000009024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1669.745358][ T4490] loop3: detected capacity change from 0 to 1 [ 1669.797466][ T4490] loop3: p2 < > p3 p4 < p5 > [ 1669.802508][ T4490] loop3: p2 size 2 extends beyond EOD, truncated [ 1669.809884][ T4490] loop3: p3 start 225 is beyond EOD, truncated [ 1669.816358][ T4490] loop3: p4 size 2 extends beyond EOD, truncated [ 1669.824074][ T4490] loop3: p5 start 225 is beyond EOD, truncated [ 1669.830514][ T4532] loop4: detected capacity change from 0 to 1 [ 1669.839001][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1669.844229][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1669.851869][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1669.858229][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1669.865218][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:50 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac1300ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x545d, 0x0) [ 1669.928687][ T4532] loop4: detected capacity change from 0 to 1 [ 1669.996184][ T4556] loop3: detected capacity change from 0 to 1 [ 1670.037724][ T4556] loop3: p2 < > p3 p4 < p5 > [ 1670.042728][ T4556] loop3: p2 size 2 extends beyond EOD, truncated [ 1670.049962][ T4556] loop3: p3 start 225 is beyond EOD, truncated [ 1670.056124][ T4556] loop3: p4 size 2 extends beyond EOD, truncated [ 1670.063578][ T4556] loop3: p5 start 225 is beyond EOD, truncated [ 1670.082234][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1670.087399][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1670.094154][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1670.100584][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1670.107835][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:51:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x3b5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 10:51:52 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa600, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) 10:51:52 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000a024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:52 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac2200ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:52 executing program 0: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x65, 0x30, 0x0, 0x65, 0x30, 0x61, 0x30, 0x38, 0x1e, 0x61, 0x30, 0x66, 0x35, 0x63, 0x35]}, &(0x7f0000000180)={0x0, "f134c43868d6d480923c4331df28067ed993dfedbf1c68f8a4464bc1562c73bffe757722f46be4dae72dd22bdc1ff2436a34f97012faabf88b7c48a1a0468789"}, 0x48, 0xfffffffffffffffd) [ 1672.644210][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1672.649447][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1672.651919][ T4580] loop4: detected capacity change from 0 to 1 [ 1672.669996][ T4586] loop3: detected capacity change from 0 to 1 [ 1672.677380][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1672.683596][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1672.691946][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1672.705123][ T4594] ================================================================== [ 1672.713355][ T4594] BUG: KCSAN: data-race in __io_cqring_fill_event / io_drain_req [ 1672.721199][ T4594] [ 1672.723533][ T4594] write to 0xffff88813b2a8400 of 4 bytes by task 4595 on cpu 1: [ 1672.731257][ T4594] __io_cqring_fill_event+0xfb/0x350 [ 1672.736574][ T4594] io_req_complete_post+0x55/0x5c0 [ 1672.741700][ T4594] __io_complete_rw+0x39d/0x460 [ 1672.746568][ T4594] io_complete_rw+0x1b/0x20 [ 1672.751177][ T4594] kiocb_done+0x18a/0x3d0 [ 1672.755523][ T4594] io_issue_sqe+0x25cf/0x6870 [ 1672.760211][ T4594] io_wq_submit_work+0x113/0x1f0 [ 1672.765159][ T4594] io_worker_handle_work+0x8cb/0xaf0 [ 1672.770479][ T4594] io_wqe_worker+0x184/0x4b0 [ 1672.775095][ T4594] ret_from_fork+0x1f/0x30 [ 1672.779530][ T4594] [ 1672.781854][ T4594] read to 0xffff88813b2a8400 of 4 bytes by task 4594 on cpu 0: [ 1672.789515][ T4594] io_drain_req+0x4e3/0x630 10:51:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005100)={&(0x7f00000050c0)={0x14, 0x5, 0x1, 0x101}, 0x14}}, 0x0) 10:51:53 executing program 0: clock_nanosleep(0x1, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 1672.794048][ T4594] io_submit_sqe+0x2e66/0x3400 [ 1672.798838][ T4594] io_submit_sqes+0x822/0xe50 [ 1672.803117][ T4602] serio: Serial port pts0 [ 1672.803529][ T4594] __se_sys_io_uring_enter+0x1c7/0xa10 [ 1672.816135][ T4594] __x64_sys_io_uring_enter+0x74/0x80 [ 1672.821555][ T4594] do_syscall_64+0x3d/0x90 [ 1672.825979][ T4594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1672.831905][ T4594] [ 1672.834227][ T4594] value changed: 0x00000000 -> 0x00000001 [ 1672.839945][ T4594] [ 1672.842264][ T4594] Reported by Kernel Concurrency Sanitizer on: [ 1672.848413][ T4594] CPU: 0 PID: 4594 Comm: syz-executor.1 Tainted: G W 5.14.0-rc1-syzkaller #0 [ 1672.858592][ T4594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.868662][ T4594] ================================================================== 10:51:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x6, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 10:51:53 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa700, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1672.892991][ T4586] loop3: p2 < > p3 p4 < p5 > [ 1672.898000][ T4586] loop3: p2 size 2 extends beyond EOD, truncated [ 1672.909821][ T4586] loop3: p3 start 225 is beyond EOD, truncated [ 1672.916209][ T4586] loop3: p4 size 2 extends beyond EOD, truncated [ 1672.929305][ T4586] loop3: p5 start 225 is beyond EOD, truncated 10:51:53 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "eb0a6ac5d63eb43bf482cc170c9c01ad0e818ebe98a4599db1eb6da594529d2f7e723d79e8206cf7c7cb823e57c602f371dc3787af064117c0a475e1ac8c1995"}, 0x48, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, r0) [ 1672.963179][ T4580] loop4: detected capacity change from 0 to 1 [ 1672.988263][ T4586] loop3: detected capacity change from 0 to 1 [ 1673.039851][ T4586] loop3: p2 < > p3 p4 < p5 > [ 1673.044940][ T4586] loop3: p2 size 2 extends beyond EOD, truncated [ 1673.053208][ T4586] loop3: p3 start 225 is beyond EOD, truncated [ 1673.059538][ T4586] loop3: p4 size 2 extends beyond EOD, truncated [ 1673.076108][ T4586] loop3: p5 start 225 is beyond EOD, truncated 10:51:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 10:51:55 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000b024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:55 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa800, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:55 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac2400ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:55 executing program 0: keyctl$instantiate_iov(0xf, 0x0, 0x0, 0x0, 0x0) [ 1675.787870][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1675.792738][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1675.795166][ T4650] loop3: detected capacity change from 0 to 1 [ 1675.800933][ T4652] loop4: detected capacity change from 0 to 1 [ 1675.811348][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1675.817770][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1675.824789][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:51:56 executing program 1: io_setup(0x8000, &(0x7f0000000340)=0x0) io_destroy(r0) [ 1675.843693][ T4668] serio: Serial port pts0 10:51:56 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xa900, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x323000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x400, 0x40, 0x100, 0x2, 0x101, 0x5, 0x7f, 0x0, 0x958, 0x0, 0x7}, 0xffffffffffffffff, 0x2, r2, 0x2) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x54, 0xfffffffffffffff9}, 0x2180, 0x6, 0x1, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 10:51:56 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000c024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:51:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000380)='3', 0x1}], 0x3}], 0x1, 0x0) [ 1675.867049][ T4650] loop3: p2 < > p3 p4 < p5 > [ 1675.872166][ T4650] loop3: p2 size 2 extends beyond EOD, truncated [ 1675.882332][ T4650] loop3: p3 start 225 is beyond EOD, truncated [ 1675.888592][ T4650] loop3: p4 size 2 extends beyond EOD, truncated [ 1675.896323][ T4652] loop4: detected capacity change from 0 to 1 [ 1675.905843][ T4650] loop3: p5 start 225 is beyond EOD, truncated 10:51:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) [ 1675.987199][ T4700] loop4: detected capacity change from 0 to 1 [ 1675.996449][ T4650] loop3: detected capacity change from 0 to 1 [ 1676.037811][ T4650] loop3: p2 < > p3 p4 < p5 > [ 1676.042899][ T4650] loop3: p2 size 2 extends beyond EOD, truncated [ 1676.051667][ T4650] loop3: p3 start 225 is beyond EOD, truncated [ 1676.057992][ T4650] loop3: p4 size 2 extends beyond EOD, truncated [ 1676.065441][ T4650] loop3: p5 start 225 is beyond EOD, truncated [ 1676.076559][ T4700] loop4: detected capacity change from 0 to 1 10:51:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:51:59 executing program 1: keyctl$instantiate_iov(0x3, 0x0, 0x0, 0x0, 0x0) 10:51:59 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xaa00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000840)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{0x0}, {&(0x7f00000002c0)='L', 0x1}, {&(0x7f0000000380)='3', 0x1}], 0x3}, {&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)}], 0x2, 0x0) 10:51:59 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac2500ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:51:59 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000d024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1678.858254][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1678.863273][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1678.870949][ T4731] loop4: detected capacity change from 0 to 1 [ 1678.877945][ T4733] loop3: detected capacity change from 0 to 1 [ 1678.889646][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1678.896172][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1678.904250][ T4736] serio: Serial port pts0 10:51:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 10:51:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e0, 0x0) [ 1678.909762][ T1038] loop2: p5 start 225 is beyond EOD, truncated [ 1678.947746][ T4733] loop3: p2 < > p3 p4 < p5 > [ 1678.953464][ T4733] loop3: p2 size 2 extends beyond EOD, truncated 10:51:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:51:59 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xab00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:51:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x3b5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 1678.973003][ T4733] loop3: p3 start 225 is beyond EOD, truncated [ 1678.979278][ T4733] loop3: p4 size 2 extends beyond EOD, truncated [ 1679.007328][ T4733] loop3: p5 start 225 is beyond EOD, truncated [ 1679.011312][ T4731] loop4: detected capacity change from 0 to 1 [ 1679.071123][ T4733] loop3: detected capacity change from 0 to 1 [ 1679.127469][ T4733] loop3: p2 < > p3 p4 < p5 > [ 1679.132853][ T4733] loop3: p2 size 2 extends beyond EOD, truncated [ 1679.140669][ T4733] loop3: p3 start 225 is beyond EOD, truncated [ 1679.147693][ T4733] loop3: p4 size 2 extends beyond EOD, truncated [ 1679.156878][ T4733] loop3: p5 start 225 is beyond EOD, truncated [ 1679.208432][ T1038] loop3: p2 < > p3 p4 < p5 > [ 1679.213461][ T1038] loop3: p2 size 2 extends beyond EOD, truncated [ 1679.220597][ T1038] loop3: p3 start 225 is beyond EOD, truncated [ 1679.227131][ T1038] loop3: p4 size 2 extends beyond EOD, truncated [ 1679.234036][ T1038] loop3: p5 start 225 is beyond EOD, truncated 10:52:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) r3 = gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_pts(r2, 0x402000) tkill(r3, 0x1000000000013) 10:52:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) 10:52:02 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000e024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 10:52:02 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40080, 0x0) 10:52:02 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xac00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:52:02 executing program 3: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac2600ffffff85000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 10:52:02 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1681.895905][ T1038] loop2: p2 < > p3 p4 < p5 > [ 1681.901054][ T1038] loop2: p2 size 2 extends beyond EOD, truncated [ 1681.911032][ T4807] loop4: detected capacity change from 0 to 1 [ 1681.927696][ T1038] loop2: p3 start 225 is beyond EOD, truncated [ 1681.934083][ T1038] loop2: p4 size 2 extends beyond EOD, truncated [ 1681.942680][ T4811] serio: Serial port pts0 [ 1681.949041][ T4812] loop3: detected capacity change from 0 to 1 [ 1681.956281][ T1038] loop2: p5 start 225 is beyond EOD, truncated 10:52:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1681.987432][ T4812] loop3: p2 < > p3 p4 < p5 > [ 1681.992395][ T4812] loop3: p2 size 2 extends beyond EOD, truncated [ 1682.009279][ T4807] loop4: detected capacity change from 0 to 1 [ 1682.023084][ T4812] loop3: p3 start 225 is beyond EOD, truncated [ 1682.029408][ T4812] loop3: p4 size 2 extends beyond EOD, truncated 10:52:02 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x772dd998e7000000, 0x20000, 0x0, 0xad00, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:52:02 executing program 1: unshare(0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xef, 0x8001}) fallocate(r1, 0x44, 0x4, 0x1ff) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000012c0)=ANY=[@ANYRES64=r4, @ANYBLOB="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"]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={r4}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000004eac0)={0x100000000, [], 0x40, "5080dc634f267f"}) 10:52:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000200)='\b', 0x1) 10:52:02 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffff8500080000000000000f024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1682.037060][ T4812] loop3: p5 start 225 is beyond EOD, truncated [ 1682.108218][ T4812] loop3: detected capacity change from 0 to 1 [ 1682.120498][ T4855] loop4: detected capacity change from 0 to 1 [ 1682.138716][ T4812] loop3: p2 < > p3 p4 < p5 > [ 1682.144278][ T4812] loop3: p2 size 2 extends beyond EOD, truncated [ 1682.171864][ T4812] loop3: p3 start 225 is beyond EOD, truncated [ 1682.178449][ T4812] loop3: p4 size 2 extends beyond EOD, truncated [ 1682.186131][ T4812] loop3: p5 start 225 is beyond EOD, truncated