l$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1509.368219][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1509.391517][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1509.514575][ T349] udevd[349]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1509.516318][ T1995] udevd[1995]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1509.534676][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory 18:21:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800004c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:15 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e1000000887700720030070005000000000000000080", 0x3c, 0x1c0}]) [ 1509.564867][T12351] loop2: p2 p3 p4 [ 1509.573762][T12351] loop2: p2 size 2064 extends beyond EOD, truncated [ 1509.586348][T12351] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1509.593909][T12351] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800600000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1509.663948][T12463] loop3: p2 < > p3 p4 [ 1509.668115][T12463] loop3: p2 size 2 extends beyond EOD, truncated [ 1509.675058][T12463] loop3: p3 start 225 is beyond EOD, truncated [ 1509.681226][T12463] loop3: p4 start 268435200 is beyond EOD, truncated 18:21:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1509.855008][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1509.862674][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1509.914882][ T155] loop2: p2 p3 p4 [ 1509.918715][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1509.933022][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1509.940810][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1509.949593][T12351] loop2: p2 p3 p4 [ 1509.953500][T12351] loop2: p2 size 2064 extends beyond EOD, truncated [ 1509.960458][T12351] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1509.968375][T12351] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1509.972454][T12578] loop4: p2 < > p3 p4 [ 1509.979815][T12578] loop4: partition table partially beyond EOD, truncated [ 1509.987336][T12578] loop4: p2 start 96 is beyond EOD, truncated [ 1509.993609][T12578] loop4: p3 start 225 is beyond EOD, truncated [ 1509.999947][T12578] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:15 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000040000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:15 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e1000000887700720030070005000000000000000080", 0x3c, 0x1c0}]) 18:21:15 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000090008000da55aa", 0x40, 0x1c0}]) 18:21:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1510.190752][T12684] loop1: p2 < > p3 p4 [ 1510.195581][T12684] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1510.203328][T12684] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1510.248139][T12688] loop3: p2 < > p3 p4 [ 1510.252289][T12688] loop3: p2 size 2 extends beyond EOD, truncated [ 1510.259038][T12688] loop3: p3 start 225 is beyond EOD, truncated [ 1510.265385][T12688] loop3: p4 start 2415919104 is beyond EOD, truncated 18:21:15 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da", 0x3e, 0x1c0}]) [ 1510.383728][T12694] loop2: p2 p3 p4 [ 1510.390260][T12694] loop2: p2 size 2064 extends beyond EOD, truncated [ 1510.396997][ T155] loop3: p2 < > p3 p4 [ 1510.401130][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1510.409958][T12694] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1510.416421][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1510.423795][ T155] loop3: p4 start 2415919104 is beyond EOD, truncated [ 1510.424488][T12694] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1510.608770][T12694] loop2: p2 p3 p4 [ 1510.612596][T12694] loop2: p2 size 2064 extends beyond EOD, truncated [ 1510.620145][T12694] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1510.627877][T12694] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1510.636310][ T155] loop2: p2 p3 p4 [ 1510.640111][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1510.647054][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1510.654628][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800484c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:16 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000018000da55aa", 0x40, 0x1c0}]) 18:21:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:16 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da", 0x3e, 0x1c0}]) 18:21:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800680000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:16 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000063000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:16 executing program 5: sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1510.754371][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1510.874147][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1510.915085][T12921] loop4: p2 < > p3 p4 [ 1510.919788][T12909] loop3: p2 < > p3 p4 [ 1510.921452][T12921] loop4: partition table partially beyond EOD, truncated [ 1510.924077][T12909] loop3: p2 size 2 extends beyond EOD, truncated [ 1510.931360][T12921] loop4: p2 start 104 is beyond EOD, truncated [ 1510.938055][T12909] loop3: p3 start 225 is beyond EOD, truncated [ 1510.944001][T12921] loop4: p3 start 225 is beyond EOD, truncated [ 1510.949768][T12909] loop3: p4 size 3657465857 extends beyond EOD, truncated [ 1510.956015][T12921] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:16 executing program 5: sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:16 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da", 0x3e, 0x1c0}]) [ 1511.034032][T12919] loop2: p2 p3 p4 [ 1511.037934][T12919] loop2: p2 size 2064 extends beyond EOD, truncated [ 1511.053743][T12919] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1511.061316][T12919] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1511.069740][T12920] loop1: p2 < > p3 p4 [ 1511.080025][T12920] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1511.084337][ T155] loop3: p2 < > p3 p4 [ 1511.087975][T12920] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1511.091378][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1511.105529][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1511.111675][ T155] loop3: p4 size 3657465857 extends beyond EOD, truncated 18:21:16 executing program 5: sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:16 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000028000da55aa", 0x40, 0x1c0}]) 18:21:16 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1511.450709][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory 18:21:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008004f4c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000003000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 18:21:17 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008006c0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1511.514305][T13364] loop3: p2 < > p3 p4 [ 1511.518489][T13364] loop3: p2 size 2 extends beyond EOD, truncated [ 1511.525697][T13364] loop3: p3 start 225 is beyond EOD, truncated [ 1511.534099][T13364] loop3: p4 size 3657465858 extends beyond EOD, truncated 18:21:17 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000004028000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) [ 1511.703825][T13371] loop2: p2 p3 p4 [ 1511.707889][T13371] loop2: p2 size 2064 extends beyond EOD, truncated [ 1511.715736][T13371] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1511.723621][T13371] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1511.844127][T13492] loop3: p2 < > p3 p4 [ 1511.848316][T13492] loop3: p2 size 2 extends beyond EOD, truncated [ 1511.855747][T13492] loop3: p3 start 225 is beyond EOD, truncated [ 1511.862101][T13492] loop3: p4 start 67108864 is beyond EOD, truncated 18:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1511.887300][T13488] loop4: p2 < > p3 p4 [ 1511.891630][T13488] loop4: partition table partially beyond EOD, truncated [ 1511.904617][T13488] loop4: p2 start 108 is beyond EOD, truncated [ 1511.910799][T13488] loop4: p3 start 225 is beyond EOD, truncated [ 1511.917171][T13488] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:17 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000038000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1511.965155][T13487] loop1: p2 < > p3 p4 [ 1511.969344][T13487] loop1: p2 size 2 extends beyond EOD, truncated [ 1511.976289][T13487] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1511.984150][T13487] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:17 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000004000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1512.312657][T13720] loop3: p2 < > p3 p4 [ 1512.316954][T13720] loop3: p2 size 2 extends beyond EOD, truncated [ 1512.330531][T13720] loop3: p3 start 225 is beyond EOD, truncated [ 1512.342837][T13720] loop3: p4 size 3657465859 extends beyond EOD, truncated 18:21:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800504c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55", 0x3f, 0x1c0}]) 18:21:17 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000048000da55aa", 0x40, 0x1c0}]) 18:21:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800740000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1512.380550][T13723] loop2: p2 p3 p4 [ 1512.390936][T13723] loop2: p2 size 2064 extends beyond EOD, truncated [ 1512.405526][T13723] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1512.418647][T13723] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:18 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40}]) 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:18 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000006000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1512.684985][T13739] loop3: p2 < > p3 p4 [ 1512.689198][T13739] loop3: p2 size 2 extends beyond EOD, truncated [ 1512.696114][T13739] loop3: p3 start 225 is beyond EOD, truncated [ 1512.702281][T13739] loop3: p4 size 3657465860 extends beyond EOD, truncated [ 1512.773968][T13740] loop1: p2 < > p3 p4 [ 1512.778084][T13740] loop1: partition table partially beyond EOD, truncated [ 1512.791684][T13740] loop1: p2 start 19536 is beyond EOD, truncated [ 1512.805411][T13740] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1512.821402][T13740] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:18 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000058000da55aa", 0x40, 0x1c0}]) [ 1512.929744][T13844] loop4: p2 < > p3 p4 [ 1512.934956][T13844] loop4: partition table partially beyond EOD, truncated [ 1512.953016][T13844] loop4: p2 start 116 is beyond EOD, truncated [ 1512.966065][T13844] loop4: p3 start 225 is beyond EOD, truncated [ 1512.981695][T13844] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.145073][T13957] loop2: p2 p3 p4 [ 1513.152788][T13957] loop2: p2 size 2064 extends beyond EOD, truncated [ 1513.166172][T13957] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1513.173965][T13957] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1513.193675][T13955] loop3: p2 < > p3 p4 [ 1513.198653][T13955] loop3: p2 size 2 extends beyond EOD, truncated [ 1513.207915][T13955] loop3: p3 start 225 is beyond EOD, truncated [ 1513.214164][T13955] loop3: p4 size 3657465861 extends beyond EOD, truncated 18:21:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008004c4f00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:18 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40}]) [ 1513.245431][ T2286] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1513.256951][ T119] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1513.267834][ T119] Buffer I/O error on dev loop3p2, logical block 0, async page read 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.345336][ T392] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1513.373899][ T96] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1513.384920][ T96] Buffer I/O error on dev loop3p4, logical block 0, async page read 18:21:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008007a0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.397236][T13955] __loop_clr_fd: partition scan of loop3 failed (rc=-16) 18:21:18 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000009000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:18 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000068000da55aa", 0x40, 0x1c0}]) 18:21:19 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40}]) 18:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.523861][T14272] loop1: p2 < > p3 p4 [ 1513.528125][T14272] loop1: partition table partially beyond EOD, truncated [ 1513.535728][T14272] loop1: p2 start 20300 is beyond EOD, truncated [ 1513.542136][T14272] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1513.549878][T14272] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1513.567932][T14279] loop2: p2 p3 p4 [ 1513.571920][T14279] loop2: p2 size 2064 extends beyond EOD, truncated [ 1513.581374][T14279] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1513.589109][T14279] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.654003][T14280] loop4: p2 < > p3 p4 [ 1513.658314][T14280] loop4: partition table partially beyond EOD, truncated [ 1513.666514][T14280] loop4: p2 start 122 is beyond EOD, truncated [ 1513.674503][T14280] loop4: p3 start 225 is beyond EOD, truncated [ 1513.680743][T14280] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1513.744311][T14385] loop3: p2 < > p3 p4 [ 1513.748593][T14385] loop3: p2 size 2 extends beyond EOD, truncated [ 1513.755600][T14385] loop3: p3 start 225 is beyond EOD, truncated [ 1513.761821][T14385] loop3: p4 size 3657465862 extends beyond EOD, truncated 18:21:19 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1513.909915][T14279] loop2: p2 p3 p4 [ 1513.915997][T14279] loop2: p2 size 2064 extends beyond EOD, truncated [ 1513.936228][T14279] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1513.944072][T14279] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1514.036968][ T155] loop2: p2 p3 p4 [ 1514.042889][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1514.050491][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1514.058336][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008004c5000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:19 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000004068000da55aa", 0x40, 0x1c0}]) 18:21:19 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800900000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:19 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000f000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:19 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000078000da55aa", 0x40, 0x1c0}]) [ 1514.246340][T14702] loop3: p2 < > p3 p4 [ 1514.256215][T14702] loop3: p2 size 2 extends beyond EOD, truncated [ 1514.268627][T14702] loop3: p3 start 225 is beyond EOD, truncated [ 1514.276538][T14702] loop3: p4 start 67108864 is beyond EOD, truncated [ 1514.353668][T14716] loop1: p2 < > p3 p4 [ 1514.357835][T14716] loop1: partition table partially beyond EOD, truncated [ 1514.365094][T14716] loop1: p2 start 20556 is beyond EOD, truncated [ 1514.371485][T14716] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1514.379817][T14716] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1514.408059][T14710] loop2: p2 < > p3 p4 [ 1514.412303][T14710] loop2: p2 size 2 extends beyond EOD, truncated [ 1514.419815][T14710] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1514.427695][T14710] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:20 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000010000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1514.656771][T14821] loop4: p2 < > p3 p4 [ 1514.662985][T14821] loop4: partition table partially beyond EOD, truncated [ 1514.670324][T14821] loop4: p2 start 144 is beyond EOD, truncated [ 1514.676709][T14821] loop4: p3 start 225 is beyond EOD, truncated [ 1514.682918][T14821] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1514.699997][T14820] loop3: p2 < > p3 p4 [ 1514.704907][T14820] loop3: p2 size 2 extends beyond EOD, truncated [ 1514.712966][T14820] loop3: p3 start 225 is beyond EOD, truncated [ 1514.719443][T14820] loop3: p4 size 3657465863 extends beyond EOD, truncated [ 1514.886237][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1514.886251][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1514.896395][T14934] loop2: p2 p3 p4 [ 1514.916000][T14934] loop2: p2 size 2064 extends beyond EOD, truncated [ 1514.926557][T14934] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1514.939563][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1514.950324][ T349] udevd[349]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1514.960903][T14934] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1515.064565][ T155] loop2: p2 p3 p4 [ 1515.068531][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1515.075880][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1515.083631][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1515.092475][T14934] loop2: p2 p3 p4 [ 1515.096352][T14934] loop2: p2 size 2064 extends beyond EOD, truncated [ 1515.103611][T14934] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008009a0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:20 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000088000da55aa", 0x40, 0x1c0}]) 18:21:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1515.117724][T14934] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1515.153945][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory 18:21:20 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000014000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1515.185984][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1515.189406][ T155] loop2: p2 p3 p4 [ 1515.199728][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1515.206877][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1515.214688][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1515.336685][T15169] loop1: p2 < > p3 p4 [ 1515.340854][T15169] loop1: partition table partially beyond EOD, truncated [ 1515.348151][T15169] loop1: p2 start 24576 is beyond EOD, truncated [ 1515.354549][T15169] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1515.362201][T15169] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1515.375112][T15145] loop3: p2 < > p3 p4 [ 1515.379402][T15145] loop3: p2 size 2 extends beyond EOD, truncated 18:21:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1515.386509][T15145] loop3: p3 start 225 is beyond EOD, truncated [ 1515.392708][T15145] loop3: p4 size 3657465864 extends beyond EOD, truncated 18:21:21 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000098000da55aa", 0x40, 0x1c0}]) [ 1515.614583][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1515.623672][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1515.634148][T15259] loop4: p2 < > p3 p4 [ 1515.638271][T15259] loop4: partition table partially beyond EOD, truncated [ 1515.645971][T15259] loop4: p2 start 154 is beyond EOD, truncated [ 1515.652160][T15259] loop4: p3 start 225 is beyond EOD, truncated [ 1515.658376][T15259] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1515.680269][T15258] loop2: p2 p3 p4 [ 1515.684444][T15258] loop2: p2 size 2064 extends beyond EOD, truncated [ 1515.691673][T15258] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1515.709241][T15258] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1515.735402][ T155] loop2: p2 p3 p4 [ 1515.739263][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1515.746383][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1515.754248][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1515.763657][T15472] loop3: p2 < > p3 p4 [ 1515.769536][T15472] loop3: p2 size 2 extends beyond EOD, truncated [ 1515.776455][T15472] loop3: p3 start 225 is beyond EOD, truncated [ 1515.782692][T15472] loop3: p4 size 3657465865 extends beyond EOD, truncated [ 1515.905185][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1515.905199][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory 18:21:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006800000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800a60000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:21 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000063000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:21 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000000a8000da55aa", 0x40, 0x1c0}]) 18:21:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1516.084925][T15485] loop3: p2 < > p3 p4 [ 1516.089150][T15485] loop3: p2 size 2 extends beyond EOD, truncated [ 1516.096191][T15485] loop3: p3 start 225 is beyond EOD, truncated [ 1516.102366][T15485] loop3: p4 size 3657465866 extends beyond EOD, truncated 18:21:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1516.183702][T15486] loop2: p2 p3 p4 [ 1516.187531][T15486] loop2: p2 size 2064 extends beyond EOD, truncated [ 1516.200676][T15486] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1516.213967][T15486] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1516.349301][T15597] loop4: p2 < > p3 p4 [ 1516.353577][T15597] loop4: partition table partially beyond EOD, truncated [ 1516.360875][T15597] loop4: p2 start 166 is beyond EOD, truncated [ 1516.375841][T15597] loop4: p3 start 225 is beyond EOD, truncated [ 1516.382200][T15597] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:21 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000000b8000da55aa", 0x40, 0x1c0}]) [ 1516.408401][T15494] loop1: p2 < > p3 p4 [ 1516.420706][T15494] loop1: partition table partially beyond EOD, truncated [ 1516.434636][T15494] loop1: p2 start 26624 is beyond EOD, truncated [ 1516.441133][T15494] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1516.452748][T15494] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1516.650408][T15811] loop3: p2 < > p3 p4 [ 1516.655061][T15811] loop3: p2 size 2 extends beyond EOD, truncated [ 1516.666340][T15811] loop3: p3 start 225 is beyond EOD, truncated [ 1516.672600][T15811] loop3: p4 size 3657465867 extends beyond EOD, truncated [ 1516.725961][ T155] loop3: p2 < > p3 p4 [ 1516.730210][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1516.737325][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1516.745835][ T155] loop3: p4 size 3657465867 extends beyond EOD, truncated 18:21:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:22 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000038c0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800a80000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:22 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000000c8000da55aa", 0x40, 0x1c0}]) 18:21:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1516.893827][T15820] loop2: p2 p3 p4 [ 1516.903626][T15820] loop2: p2 size 2064 extends beyond EOD, truncated [ 1516.918413][T15820] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1516.928733][T15820] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:22 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000003c20800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1517.084494][T15826] loop3: p2 < > p3 p4 [ 1517.088968][T15826] loop3: p2 size 2 extends beyond EOD, truncated [ 1517.096219][T15826] loop3: p3 start 225 is beyond EOD, truncated [ 1517.102369][T15826] loop3: p4 size 3657465868 extends beyond EOD, truncated [ 1517.133566][T15831] loop1: p2 < > p3 p4 [ 1517.157649][T15831] loop1: partition table partially beyond EOD, truncated [ 1517.167738][T15831] loop1: p2 start 27648 is beyond EOD, truncated [ 1517.174125][T15831] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1517.181729][T15831] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1517.325294][T15905] loop4: p2 < > p3 p4 [ 1517.334892][T15905] loop4: partition table partially beyond EOD, truncated [ 1517.342897][T15905] loop4: p2 start 168 is beyond EOD, truncated [ 1517.349159][T15905] loop4: p3 start 225 is beyond EOD, truncated [ 1517.355431][T15905] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1517.366956][T15944] loop2: p2 p3 p4 [ 1517.370838][T15944] loop2: p2 size 2064 extends beyond EOD, truncated [ 1517.390293][T15944] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1517.403228][T15944] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1517.605915][ T155] loop2: p2 p3 p4 [ 1517.609904][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1517.617078][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1517.624558][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1517.633295][T15944] loop2: p2 p3 p4 [ 1517.637148][T15944] loop2: p2 size 2064 extends beyond EOD, truncated [ 1517.644346][T15944] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800007400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:23 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000000d8000da55aa", 0x40, 0x1c0}]) 18:21:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1517.651931][T15944] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1517.710096][ T155] loop2: p2 p3 p4 [ 1517.716566][ T155] loop2: p2 size 2064 extends beyond EOD, truncated [ 1517.724479][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1517.732014][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1517.744173][T16056] loop3: p2 < > p3 p4 [ 1517.748427][T16056] loop3: p2 size 2 extends beyond EOD, truncated 18:21:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ac0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:23 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005070000000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1517.755433][T16056] loop3: p3 start 225 is beyond EOD, truncated [ 1517.761610][T16056] loop3: p4 size 3657465869 extends beyond EOD, truncated 18:21:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:23 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000000e8000da55aa", 0x40, 0x1c0}]) [ 1517.930584][T16065] loop2: p2 < > p3 p4 [ 1517.937463][T16065] loop2: p2 size 2 extends beyond EOD, truncated [ 1517.948542][T16065] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1517.961523][T16068] loop1: p2 < > p3 p4 [ 1517.967206][T16065] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1517.968550][T16068] loop1: partition table partially beyond EOD, truncated [ 1517.982115][T16068] loop1: p2 start 29696 is beyond EOD, truncated [ 1517.988533][T16068] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1517.996522][T16068] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1518.046495][T16080] loop3: p2 < > p3 p4 [ 1518.052071][T16080] loop3: p2 size 2 extends beyond EOD, truncated [ 1518.059029][T16080] loop3: p3 start 225 is beyond EOD, truncated [ 1518.075908][T16080] loop3: p4 size 3657465870 extends beyond EOD, truncated [ 1518.084867][ T155] loop3: p2 < > p3 p4 [ 1518.089063][ T155] loop3: p2 size 2 extends beyond EOD, truncated 18:21:23 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050a0000000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1518.095992][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1518.105927][ T155] loop3: p4 size 3657465870 extends beyond EOD, truncated [ 1518.157822][T16082] loop4: p2 < > p3 p4 [ 1518.161976][T16082] loop4: partition table partially beyond EOD, truncated [ 1518.169492][T16082] loop4: p2 start 172 is beyond EOD, truncated [ 1518.175748][T16082] loop4: p3 start 225 is beyond EOD, truncated [ 1518.181931][T16082] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1518.331055][T16187] loop2: p2 < > p3 p4 [ 1518.336929][T16187] loop2: p2 size 2 extends beyond EOD, truncated [ 1518.347513][T16187] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1518.355332][T16187] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1518.364558][ T155] loop2: p2 < > p3 p4 [ 1518.368755][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1518.375525][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1518.383057][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1518.484259][T16187] loop2: p2 < > p3 p4 [ 1518.488485][T16187] loop2: p2 size 2 extends beyond EOD, truncated [ 1518.500574][T16187] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1518.508322][T16187] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1518.517495][ T155] loop2: p2 < > p3 p4 [ 1518.523270][ T155] loop2: p2 size 2 extends beyond EOD, truncated 18:21:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800007a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1518.529998][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1518.537678][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800c10000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:24 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000108000da55aa", 0x40, 0x1c0}]) 18:21:24 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050d0000000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1518.785852][T16404] loop2: p2 < > p3 p4 [ 1518.790200][T16404] loop2: p2 size 2 extends beyond EOD, truncated [ 1518.814376][T16404] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1518.822985][T16404] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1518.966744][T16511] loop4: p2 < > p3 p4 [ 1518.966779][T16406] loop3: p2 < > p3 p4 [ 1518.971772][T16511] loop4: partition table partially beyond EOD, truncated [ 1518.981552][T16406] loop3: p2 size 2 extends beyond EOD, truncated [ 1518.983322][T16511] loop4: p2 start 193 is beyond EOD, truncated [ 1518.988884][T16406] loop3: p3 start 225 is beyond EOD, truncated [ 1518.995886][T16511] loop4: p3 start 225 is beyond EOD, truncated [ 1519.000532][T16406] loop3: p4 size 3657465872 extends beyond EOD, truncated 18:21:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1519.003659][T16513] loop1: p2 < > p3 p4 [ 1519.008863][T16511] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1519.014153][T16513] loop1: partition table partially beyond EOD, truncated [ 1519.033468][T16513] loop1: p2 start 31232 is beyond EOD, truncated [ 1519.045237][T16513] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1519.053228][T16513] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800098a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005100100000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000118000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800cc0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1519.633741][T16729] loop2: p2 < > p3 p4 [ 1519.637895][T16729] loop2: p2 size 2 extends beyond EOD, truncated [ 1519.667763][T16729] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1519.675776][T16729] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1519.694361][T16732] loop3: p2 < > p3 p4 [ 1519.699058][T16732] loop3: p2 size 2 extends beyond EOD, truncated [ 1519.708319][T16732] loop3: p3 start 225 is beyond EOD, truncated [ 1519.715357][T16732] loop3: p4 size 3657465873 extends beyond EOD, truncated 18:21:25 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000300000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1519.875584][ T2286] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1519.887181][T16743] loop4: p2 < > p3 p4 [ 1519.891252][T16743] loop4: partition table partially beyond EOD, truncated [ 1519.898590][T16743] loop4: p2 start 204 is beyond EOD, truncated [ 1519.905194][ T96] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1519.916060][ T96] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1519.932388][T16743] loop4: p3 start 225 is beyond EOD, truncated [ 1519.938806][T16743] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1519.968880][T26898] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 18:21:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1519.976838][T16732] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1519.982887][ T96] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1519.997982][ T96] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1520.010594][T16772] loop1: p2 < > p3 p4 [ 1520.018265][T16772] loop1: partition table partially beyond EOD, truncated 18:21:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000128000da55aa", 0x40, 0x1c0}]) [ 1520.027132][T16772] loop1: p2 start 35337 is beyond EOD, truncated [ 1520.042223][T16772] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1520.050303][T16772] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1520.083401][T16852] loop2: p2 < > p3 p4 [ 1520.087677][T16852] loop2: p2 size 2 extends beyond EOD, truncated [ 1520.099957][T16852] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1520.107616][T16852] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1520.236897][T16860] loop3: p2 < > p3 p4 [ 1520.241252][T16860] loop3: p2 size 2 extends beyond EOD, truncated [ 1520.248945][T16860] loop3: p3 start 225 is beyond EOD, truncated [ 1520.255183][T16860] loop3: p4 size 3657465874 extends beyond EOD, truncated [ 1520.299847][ T155] loop3: p2 < > p3 p4 [ 1520.304348][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1520.312216][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1520.318454][ T155] loop3: p4 size 3657465874 extends beyond EOD, truncated [ 1520.344761][T16852] loop2: p2 < > p3 p4 [ 1520.349110][T16852] loop2: p2 size 2 extends beyond EOD, truncated [ 1520.356043][T16852] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1520.363967][T16852] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800009000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:25 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000001f8000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000500000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800e10000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1520.413289][ T155] loop2: p2 < > p3 p4 [ 1520.417423][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1520.424308][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1520.431709][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1520.604466][ T155] loop3: p2 < > p3 p4 [ 1520.608762][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1520.617602][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1520.625880][ T155] loop3: p4 size 3657465887 extends beyond EOD, truncated [ 1520.635764][T16970] loop3: p2 < > p3 p4 [ 1520.639951][T16970] loop3: p2 size 2 extends beyond EOD, truncated [ 1520.646830][T16970] loop3: p3 start 225 is beyond EOD, truncated [ 1520.652995][T16970] loop3: p4 size 3657465887 extends beyond EOD, truncated [ 1520.663630][T17077] loop4: p2 < > p3 p4 [ 1520.667862][T17077] loop4: partition table partially beyond EOD, truncated [ 1520.675257][T17077] loop4: p2 start 225 is beyond EOD, truncated [ 1520.681649][T17077] loop4: p3 start 225 is beyond EOD, truncated [ 1520.688120][T17077] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1520.723448][T17083] loop2: p2 < > p3 p4 [ 1520.727928][T17083] loop2: p2 size 2 extends beyond EOD, truncated [ 1520.742496][T17083] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1520.754842][T17083] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1520.766304][T17079] loop1: p2 < > p3 p4 [ 1520.770476][T17079] loop1: partition table partially beyond EOD, truncated [ 1520.778062][T17079] loop1: p2 start 36864 is beyond EOD, truncated [ 1520.785028][ T155] loop2: p2 < > p3 p4 [ 1520.789198][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1520.795921][T17079] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1520.803315][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1520.811019][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1520.818326][T17079] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:26 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000208000da55aa", 0x40, 0x1c0}]) [ 1521.024153][ T2286] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1521.024851][T17079] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1521.050253][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1521.058071][ T119] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 18:21:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1521.071846][ T119] Buffer I/O error on dev loop1p4, logical block 2416, async page read [ 1521.091811][T17083] loop2: p2 < > p3 p4 [ 1521.096232][T17083] loop2: p2 size 2 extends beyond EOD, truncated [ 1521.103060][T17083] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1521.104816][T17298] loop3: p2 < > p3 p4 [ 1521.111963][T17083] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1521.114549][T17298] loop3: p2 size 2 extends beyond EOD, truncated [ 1521.128307][T17298] loop3: p3 start 225 is beyond EOD, truncated [ 1521.134610][T17298] loop3: p4 size 3657465888 extends beyond EOD, truncated [ 1521.206493][ T155] loop2: p2 < > p3 p4 [ 1521.211752][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1521.218689][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1521.226311][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800009a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:26 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000600000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800040200000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:26 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000228000da55aa", 0x40, 0x1c0}]) 18:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r4}], {0x10, 0x5}}, 0x9c, 0x3) [ 1521.460703][T17408] loop2: p2 < > p3 p4 [ 1521.465013][T17408] loop2: p2 size 2 extends beyond EOD, truncated [ 1521.471772][T17408] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1521.479550][T17408] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1521.490391][T17418] loop3: p2 < > p3 p4 [ 1521.494641][T17418] loop3: p2 size 2 extends beyond EOD, truncated [ 1521.501572][T17418] loop3: p3 start 225 is beyond EOD, truncated 18:21:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1521.507773][T17418] loop3: p4 size 3657465890 extends beyond EOD, truncated [ 1521.554648][T17419] loop1: p2 < > p3 p4 [ 1521.558849][T17419] loop1: partition table partially beyond EOD, truncated [ 1521.566179][T17419] loop1: p2 start 39424 is beyond EOD, truncated [ 1521.572761][T17419] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1521.580490][ T96] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1521.580523][T17419] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1521.591386][ T96] Buffer I/O error on dev loop2, logical block 0, async page read [ 1521.611322][ T119] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1521.622217][ T119] Buffer I/O error on dev loop2, logical block 0, async page read [ 1521.630236][ T155] loop2: unable to read partition table 18:21:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r1, r2, 0x0, 0x7ffff000) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r4}], {0x10, 0x5}}, 0x9c, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1521.816680][T17429] loop4: p2 < > p3 p4 [ 1521.821067][T17429] loop4: partition table partially beyond EOD, truncated [ 1521.828877][T17429] loop4: p2 start 516 is beyond EOD, truncated [ 1521.835195][T17429] loop4: p3 start 225 is beyond EOD, truncated [ 1521.841425][T17429] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1521.863930][T17408] loop2: p2 < > p3 p4 [ 1521.868150][T17408] loop2: p2 size 2 extends beyond EOD, truncated [ 1521.875031][T17408] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1521.882770][T17408] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:27 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000258000da55aa", 0x40, 0x1c0}]) [ 1522.029372][ T155] loop2: p2 < > p3 p4 [ 1522.033753][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1522.044172][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1522.051917][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000a200000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:27 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000700000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="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"}, {&(0x7f0000000180)="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"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="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"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) 18:21:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000300000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1522.201609][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1522.203644][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1522.255686][T17637] loop3: p2 < > p3 p4 [ 1522.259947][T17637] loop3: p2 size 2 extends beyond EOD, truncated [ 1522.266995][T17637] loop3: p3 start 225 is beyond EOD, truncated [ 1522.273238][T17637] loop3: p4 size 3657465893 extends beyond EOD, truncated 18:21:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1522.308135][ T155] loop2: p2 < > p3 p4 [ 1522.314102][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1522.322360][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1522.330936][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1522.346298][T17643] loop2: p2 < > p3 p4 18:21:27 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000408000da55aa", 0x40, 0x1c0}]) [ 1522.353662][T17643] loop2: p2 size 2 extends beyond EOD, truncated [ 1522.361494][T17643] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1522.369165][T17643] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1522.398163][T17652] loop1: p2 < > p3 p4 18:21:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1522.402302][T17652] loop1: partition table partially beyond EOD, truncated [ 1522.409504][T17652] loop1: p2 start 41472 is beyond EOD, truncated [ 1522.416111][T17652] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1522.424059][T17652] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1522.561164][ T155] loop3: p2 < > p3 p4 [ 1522.565656][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1522.572984][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1522.579517][ T155] loop3: p4 size 3657465920 extends beyond EOD, truncated [ 1522.588361][T17659] loop3: p2 < > p3 p4 [ 1522.592559][T17659] loop3: p2 size 2 extends beyond EOD, truncated [ 1522.604118][T17659] loop3: p3 start 225 is beyond EOD, truncated [ 1522.610317][T17659] loop3: p4 size 3657465920 extends beyond EOD, truncated [ 1522.633499][T17660] loop4: p2 < > p3 p4 [ 1522.637667][T17660] loop4: partition table partially beyond EOD, truncated [ 1522.644966][T17660] loop4: p2 start 768 is beyond EOD, truncated [ 1522.651143][T17660] loop4: p3 start 225 is beyond EOD, truncated 18:21:28 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005020800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1522.657343][T17660] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:28 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000488000da55aa", 0x40, 0x1c0}]) [ 1522.884701][T17773] loop2: p2 < > p3 p4 [ 1522.888971][T17773] loop2: p2 size 2 extends beyond EOD, truncated [ 1522.896412][T17773] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1522.904190][T17773] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1522.917274][ T155] loop3: p2 < > p3 p4 [ 1522.921507][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1522.928326][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1522.934541][ T155] loop3: p4 size 3657465928 extends beyond EOD, truncated [ 1522.943174][T17774] loop3: p2 < > p3 p4 [ 1522.947377][T17774] loop3: p2 size 2 extends beyond EOD, truncated [ 1522.955123][T17774] loop3: p3 start 225 is beyond EOD, truncated [ 1522.961878][T17774] loop3: p4 size 3657465928 extends beyond EOD, truncated 18:21:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000a400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="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"}, {&(0x7f0000000180)="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"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="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"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) 18:21:28 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005030800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1523.003890][T17773] loop2: p2 < > p3 p4 [ 1523.011891][T17773] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.019018][T17773] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.026761][T17773] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:28 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000004c8000da55aa", 0x40, 0x1c0}]) 18:21:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ce0300000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1523.163010][ T155] loop2: p2 < > p3 p4 [ 1523.167375][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.175547][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.183075][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1523.324171][T17893] loop3: p2 < > p3 p4 [ 1523.330441][T17893] loop3: p2 size 2 extends beyond EOD, truncated [ 1523.337815][T17893] loop3: p3 start 225 is beyond EOD, truncated [ 1523.344648][T17893] loop3: p4 size 3657465932 extends beyond EOD, truncated [ 1523.364835][T17889] loop2: p2 < > p3 p4 [ 1523.369096][T17889] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.376139][T17889] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.383801][T17889] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1523.403581][T17897] loop1: p2 < > p3 p4 [ 1523.407660][T17897] loop1: partition table partially beyond EOD, truncated [ 1523.414959][T17897] loop1: p2 start 41984 is beyond EOD, truncated [ 1523.421280][T17897] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1523.428986][T17897] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1523.491924][T17898] loop4: p2 < > p3 p4 [ 1523.496255][T17898] loop4: partition table partially beyond EOD, truncated [ 1523.505786][ T155] loop2: p2 < > p3 p4 [ 1523.510122][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.516602][T17898] loop4: p2 start 974 is beyond EOD, truncated [ 1523.522999][T17898] loop4: p3 start 225 is beyond EOD, truncated [ 1523.530285][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:29 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005040800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:29 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000608000da55aa", 0x40, 0x1c0}]) [ 1523.537616][T17898] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1523.544897][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1523.653759][T17910] loop3: p2 < > p3 p4 [ 1523.656449][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1523.658817][ T392] udevd[392]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1523.677603][T17910] loop3: p2 size 2 extends beyond EOD, truncated [ 1523.684538][T17910] loop3: p3 start 225 is beyond EOD, truncated [ 1523.690978][T17910] loop3: p4 size 3657465952 extends beyond EOD, truncated [ 1523.705997][T17913] loop2: p2 < > p3 p4 [ 1523.709252][ T349] udevd[349]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1523.710265][T17913] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.726722][T17913] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.734342][T17913] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1523.764948][ T155] loop2: p2 < > p3 p4 [ 1523.769205][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.778002][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.785586][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1523.873922][T17913] loop2: p2 < > p3 p4 [ 1523.878370][T17913] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.886488][T17913] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.894145][T17913] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1523.902527][ T155] loop2: p2 < > p3 p4 [ 1523.906767][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1523.913546][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1523.921976][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000c100000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:29 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000688000da55aa", 0x40, 0x1c0}]) 18:21:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="a744a48922f31c571a951a49348a1baf83605a03cda4070b369bd066e66f78c6a835b97984f278eb9fa3674ecc76428173d8e9428b3d47948ba2b627e2eb06bf2441cba71a8b9531f481eb7f7f7753ea597236c5a626855c71b705ea2b1c74d75a469cf8f9f9e12d1262354c1b39dd2edd86db5aceaec2949d303f4d96f23031fb5be10b8539fc15c8896a7f707c91c742ff2b558e0908079e0b0a3cd19056e21e05ceb6d89fe553ba4d036427fdc68ccff411ef96fc2b63337c224e9ae8668907cd6748ff5b32541e641f0e18ec8199e914dacbe92d02a32c9baf3b152c183c73e42f64437165376c39c036930afcb615372d04c8332e7f1727be318822ed19e3b6de67a8c51c9a269ed75a4071f2482f5592c67ab7526fabb5039ce1b43113358409e251654894a7c1134782ad371c8de2a92d280a3eded841815e9e18a2a5ca51662ff5493aa091b433d2ec94569a529b2382a375afd55d644122dc54b012bb3ec2ac3c57186178f447a822619a9e57a27a921164072ad6e392d0a4f2c2ba5ac26aa1e38c9ae0b8de4aefd10107994c918a6f1a773a2bfaed92f42803af59ad119e1e0053b5fde16da6047c4844c20f51733cebcf4a02aa407ec0b9e96d3fd4031326c6a7208e22862f928590dc9df295be4c5a3d22c1afc71014b0b679150184d8b7b1cc80251e09917406c095f03676ca56a98969184a6907e1c7684772b9a3bb4a4f69d9e24706ee7bb09ccea07e756e480f44bea75736a1b78f2ba4ed63eb55a3f12be9a92f9631fdcc715d99c1313baf5b65ea3ff5e6337808b74750eb02d105a71e5832b8dba39c019d9b096e1cf15b3196026f5445eefd5d7362fedef6254675bfccca6a78ad76adf80333721542905043634efc485b2e189a2742d3111bff858a4fa7ce3d325e46e67335934305f6df2a2026826f052ddbd8c02cdb1738a4fab0a82eace56d126c7ced08cce3d7444586b027b5e757d221f0209f08ac496d35ccfc5d64e08c9afa97174ac6af5ee1d4893cbebe62d4c684b6c2d7f9d3a043855652ea4b19468090427dbb142dd966c0bad31f30284562055da3b3f6042ca2f68fdd24654dce2ede8df51666ca9251467bcc0d5f6a5488631726d66de5bd6da44298dd0c7644baa410c58d013db73fd0f3cf1544dfd1472ae4add07df1957f20c09c5779b51cc783046d5c8719069a39d69d6f59770c2bbeeeb77fc04c8499214d30290d2ca02e6e50bb915371bd9ffdc82e787f6d148f2ade0b39b77cf793f698d70a101090dddc50b7b4257d3e4409c36827e84f9bd076e88b3d86f972fa401acbb1dab642f2c2317212c8fe9adb1aa9850593ee0849661c8ea9478e8f139c5ee7281bfc8f7a34bc8e7742823f5bd23df7d241f7b0318cbc51710d3050416d6e69f59c0952a6c78c4f0e688342bbbabf814dd8dd0e6f833f9c2bcdb34bdaba76b7b58cd72cc2aa4a1fb3046a41187141918764e40e87184bcdc91a79f159f96709ef948efcda183fb4186c2b3117abc60348a41c8bf5701d25c611d9f4690c5119ed1ed553d708bfd5e34748483f088ad9e6c08097e32fca7626004363560313b9e57547f2bdc88d8f35f52f9594dee0f48860aee42f5a123d1f7da914aecbe7715e0eb16ae0008777cd6bf32b52f9e1d8ccf04388989524a0a2b7f783e66361f521038ceb9d6e12f2fa5a7755a39143891ff7c8b4a065242f5009ed44109be774ef7e4164b6416a5001bf891fe057ffade370762ba8145bff62885d82c4e622e4c5107355f717fff2e5b51227306b8e95ec65a2372d7e88b92a26a1283d6b63ee2e3345ef7aeb7148680ea4f791606a9e6d9ce3aa4eb2caea27604ed876e56e9ef667f17e081e2f969378785bc5e33625c85169558090db17aeec0c6fb66efeb14e61eb9d1b38eed83af4eb40b424e0704a1564385934ab73cbe874ea3fcee5ae3f348faf757125e1ddf19395a9d1d021184fcad056d4ee63fc1ab39c3ad777bd00ffa468883f1fa03f5c35e9e4a29afcb63de0f895c5ad57f5be01724b13953851820d0a0c9d028128bbbe92bcbc00d14e980fb8aa8c2592b347df1176f0c26c974c98f722f021b683c2c68d42d8ca5ff35c92d08e954da3087db71d15792e0abdf3005408f9cc1024e0c7a28b884f4acd15ac44ccdfa33d78de270d674a363f6fa2a794f95ef09b8129c07d42e7f069811c3c8f5697791b8ff79eb893ef4892b9692c5dde0a41422caaa0aaaab3dc41dfed18230bc570a1a4c4c9b9c9344d2bc1d1a40f1c0de0e97f312fc82976ef4b892c6f5a215bd41aa5ed3fc5fa2bdc95fc224226e3a3535f7835298c5c805f6d13234216c7c13feefc57e2ed8e11dac0b5a74ba4e9958906cf284ccb4801dabf621d8a9ad9a565e6b219509ff536bc871b8c91b700559a919e3d07407bd5ec7cf9d21af03ad61429816b1e1495cf75e647968bcd80371b5a87e2dd74f056e54acc4630c751352e40332cd77558294a286ea5c773d0160d1a0efba80a16f651fbfa017c99e92c996ec71c63ae05ed7d704d5a0049b2dfd29e98f033ca9faad35637385747fa1d8e41a46f6ed1182a5bdfe7c280f2d1c0e77bda18167e0f939c2b023095d5723a09a4cb892c6590cc98a25153430f3a0bb75556b6ecf92557c939906408d18da4c60a1021596c338c641d7fcf1cea4592a33c284ae4d12664c94931e0cc90d9ae8d7bbfc60da071cb1e56d404a24a35f758d26775b3a8d0c536a2121ffdcc35c4ac37f2dc97033946b229214dbaa6d2c87d9fda9d5905c3d5a6069d7fc4eaecacc8667a1228460e61842bb088818f625fb8f11b1400c8e566f18e351167e1a26e9b18753b7f174b6713e54971afb80770d56e9d6915bb18f22601664e9e5d387e6d02d90f6ef41dac2fa37e080c8836ecadc12986ae206a06becb085d12abd6d77185e57802a9bb61176ba3cf2f79371cd311036bfdb1aae2894f3c79930f881e64eff892362cf73e9d5a1f03859dce3f4a2e84932cb8eddf1665b8fd9710efde4930347ec453435c9739dc38f802307d3f4834d09e9c5323f5e63abb5e7381bfae3234c70378c06ef683b35e3eab9a1af0b9266071b8544e0cfe44ec28ae10a699fc97302f7cdd1df0f874b62e19da15ae2c6922a4c17929923c5691a7db01a6e2238c1a6353319f6ba229e0a6a88e400b409ca49f84c66ece974ff29f4951a14eb449fe018fdabf26a63681b650772c756a41c206c71925277603d40b885d6c568787ed080af1d47a418df8069eb2d3100c40e14feaca0a28287598f9475f4b162e2d489a44f0e0ec0562942a93e3f132f968c2ecf200a0ace4b1d39780af665d073edae055dbf40bf7f404ec6325953872eba19c4c22493a975c9c9d6ec967ad124ae74131a56a5064bfb94749efc17ce120684963fe17b3cf713380f220bebee3b8a2a1b6c6ae03dda9baae2f33683a884b4a46120b5d9af9b34833b1e5a4bebc4353c50185ecf15d5188fc63b9c8fbf0b3832a54d4a757815c7c87bcbda020be4ec38ed84ede46120b737bed6ea4e30b6e71eb89b8fae89d83f6707f561bbccb07aa44104fe5c5a39cf23dd441aa74b529fca7d254106238c6334deb1524636847d9c53f0ecc4f48c3bd7ade51db0c3025e1f3cce098db17c151e2f24a7b398a1f68275e4b4e36d8b1f7285ba7173c32432e1180abe16f2117c975cc027e0aa834e8da37591486f656608b9ef085d4fa705496f84801f57246926125e2939812825a96baf851ecb9a06824d35b7729d798f908ac37643659c1d2641d216147625a221204c51682569ea1adb80ff3d0c24eb5534b9950fd40563cca364d9858331a81763e51a8b8b9fc38e501f030d2424f6f0bb2e19c52a95be998eb4102f8306e78d76eb16be034ba557fb73afce9548fec5fe1fc44c481cd69e6fcac1cd717d371eaacf7ae7d9bfbc1a10b9a47d5e22b7862995f5ce40990c4a04e7bdaa60ce6587984f04508d6eff44d2701c450cd8aec9a3f68a108a5d96b997c8534ff994a8835246b4b3a04f767fa713356bcd52fbfedeecc19e685cb50407afdf5cb863145beeb40d288a6a3cd1aecf977e94b6a3aaff35d808a89ca61e9e90b470c5ce8795e88ccc243836a4c3114f8f2a0d9f3d24461c4217a615199af841e72a5571f333ef88d236a98edec65470f545bb024461412a571fb332936215c1e6cfb0e9d2f0b2f40a548f24543a0f0cc860b44d4b7ce99878b40145699a7af699d421d2a90a1b11d31001162a23287acbee41898b7dcd685643b52683a479f76f8e0a2f731a3269000216d3b7c981a65e7a523621984f60a92a731e42e7287b059031935f07ae78650b936918c27591676ca5a8f10ad4d2b47c7655376b10ac821829e9019c4e81dafb314195458082069406d0a3611ed1f54e8bdfa68e7508cf022c37f73d03dd491bc82770925812471aaf582d81712fba20b4edaf1b930105ce03024307abebfadc94d4745403ac51777323edb453f20a7da04d54d3f7c8f317dc0411b308fb0faf92b587af5569b5ba4e98531b3e9dafc45826262b967c619fc8f98ff7d6e262b685194b5d412e1f2666b623328533036188e84a668828364988d9e6b71c6eb7445e17c7a6d03269374db16333dd816538ac1e4c7c053e8f4203e3baabca1ed08bbd9f315f2579346bb2f584b7d3d768e4077a906b2e6b2be1ac0a4d957d59fc24ba46aca3063b7829c528841a35c83d8fa151f2977695c0ea738d2677e5fb90c7c81bad22deb07b276128beffbc02ce130807dff510424f88113def5e2099c9df0e37f9c74829761d24d3ce20d2f99b99b4c471857a05ccb7d914efb5d07580478fa432719baf4612a6b1cbf6fe35fc853a2b8e0c1c56fc4b0c2ba7300b18a5bacd26ccfbe72d24b07ac7f2f0afda99680c57b99f4f24c67e2d52e441df3bb62a3e9507d4fb2dfaf6567ca48f2dbefb0b533b37d9fe059ee4e4fe5c1bbf41673b982dab5bb6175243d8c60e3cc35e766d5967a2cff8c75ccea940e552ccafc81ec78ae490ecfa843a4448450bc6213e83be410147210c38e55585f647abee2be8086bb49f67f6cbd02ef777273df61e0d6a13e12799a00faa0c6e32af2c08e83ea5cb752b1242740273ff0af3d04c3f45ee4bb0271a4e4e8556d432e168bc04d4f6cfd1619b7ecca1be32c62ebec9b43ced512f22324db9a7b083eb7c9938053f02cd86e716d1726250da1fc49894f1f69cc70f432e1dc7700ba84e1a88d9212dc6cf710e9e22eaf32bbf8cc611f057219a63a541f4b62f40f87204f6ddf8f6618f8cea01b1864f75c65ae46571895c7b17eda09ad600fc0e08a984506b288b8fefc78f3b764f7d1218c2a2a01dc9cf0788ed019314a92f3e47fa891737c30e1912e1170839ae819b670c6c23e06c742034fda67b1d5e9a4d33d4402bee38d7c39d09ae42654032afab88b87b7aaf4fa4d042d23cc7ae3054ba15ae9395e53a6c1531cab15a02d75d6b7fa200208141945ce2377a69a18477e62eaad512a0c7ece51faae5905ea9f18adb8c16c8c1901c5f973b0fdcc75078bc0bd84388bafe7e8399f4355dba777ed0349e2144d6b7a69105650d7ce7cbe5ff874205b0295cca1239f9edf3a94528a8baa7fa1d46fc393596b49150edbafc210b1dbd6fdbcf6569842afd6b6ad35424b692e7f07992bb25f10264177e3e288aa610b4eaf1d0ec1f4a6f3c4a2c1392bfd490828667adb5bb6dd3ab82729a893db002bdb8b3749c3e45d8e8c04959a9f63afb28f1c12b0a70dc80562d001caefe4b4"}, {&(0x7f0000000180)="686a2b53cc2a1991844e0c9e8536deae9343afec4d39c580435279df7a477bce1eae7d27bae884419e2192ac85261f21c4293d3b801b388a6d180ae50c26ebff890091f31732474edebd8c03b2a70f65124863de666dbf1c9340f77711337f4f4b9a878143692f6a8978f6033330649a6b8589264b19dd56d5473ed12e3ba3a2d156d720620774ff0ea3fe50a8b2241ff6f4b05d251042c322e9c0cebac00b6222be2f9170840002d8f693ef739dc871418bcb698b66d3b151283d800333c1ff5b89588bce8293589e09f02aa7aa949ecf87db32e9d8d5a019c2f3afdef195bb79564753c7c61ce7d65b648ca8624ae1fe51effe397ddaeef8a5"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="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"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) 18:21:29 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005050800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1523.978225][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1523.989027][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory 18:21:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800d00300000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1524.078430][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1524.080755][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1524.100686][T17924] loop3: p2 < > p3 p4 [ 1524.105014][T17924] loop3: p2 size 2 extends beyond EOD, truncated [ 1524.112034][T17924] loop3: p3 start 225 is beyond EOD, truncated [ 1524.118611][T17924] loop3: p4 size 3657465960 extends beyond EOD, truncated 18:21:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1524.173425][T17923] loop2: p2 < > p3 p4 [ 1524.177962][T17923] loop2: p2 size 2 extends beyond EOD, truncated [ 1524.185914][T17923] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1524.204913][T17923] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1524.233899][T17990] loop1: p2 < > p3 p4 [ 1524.237984][T17990] loop1: partition table partially beyond EOD, truncated [ 1524.245657][T17990] loop1: p2 start 49408 is beyond EOD, truncated [ 1524.252062][T17990] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1524.260001][T17990] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1524.329854][T18038] loop4: p2 < > p3 p4 [ 1524.338777][T18038] loop4: partition table partially beyond EOD, truncated [ 1524.346004][T18038] loop4: p2 start 976 is beyond EOD, truncated [ 1524.352195][T18038] loop4: p3 start 225 is beyond EOD, truncated [ 1524.358418][T18038] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:29 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005060800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:29 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000006c8000da55aa", 0x40, 0x1c0}]) 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1524.456153][T26898] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1524.464052][T17990] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1524.477844][ T119] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1524.491475][ T119] Buffer I/O error on dev loop1p4, logical block 2416, async page read [ 1524.644251][T18049] loop3: p2 < > p3 p4 [ 1524.648403][T18049] loop3: p2 size 2 extends beyond EOD, truncated [ 1524.654770][T18048] loop2: p2 < > p3 p4 [ 1524.656705][T18049] loop3: p3 start 225 is beyond EOD, truncated [ 1524.659039][T18048] loop2: p2 size 2 extends beyond EOD, truncated [ 1524.664981][T18049] loop3: p4 size 3657465964 extends beyond EOD, truncated [ 1524.679042][T18048] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1524.689062][T18048] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1524.700129][ T155] loop2: p2 < > p3 p4 [ 1524.704358][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1524.711074][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1524.718885][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1524.816077][ T119] Buffer I/O error on dev loop1p3, logical block 19072, async page read [ 1524.824531][ T119] Buffer I/O error on dev loop1p3, logical block 19073, async page read [ 1524.832913][ T119] Buffer I/O error on dev loop1p3, logical block 19074, async page read [ 1524.841325][ T119] Buffer I/O error on dev loop1p3, logical block 19075, async page read 18:21:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000e100000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:30 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000748000da55aa", 0x40, 0x1c0}]) 18:21:30 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005070800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="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"}, {&(0x7f0000000180)="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"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="a6d88ad55acea75775102bf01079746d57d868d7ae3959b3cd2eb7539b76fbcbe7e9fa4ad5c6882e389cc679269d1fb75940a20016c9277fdfc90447e1e469bde6273d6913f2117273eb3da548007181674b15f3a8fea05347c420501adb78d9608c9d920c4c57b565e0c857e989f698ee4860813706c6e960061c7bd8a945e7c0bb904dd9108486570e7c4f6c8dbe570699d415eaab64c4b6fb86e93bddd7340907b1b48c798f8bd25e34917ead5b1bdd97e70fe844f88e780c8d941924fe8bdb1d08d93701a785364654458fa3aa33518ccb15e47ba44332f9f4153598179eaa5f1c831a705f6079f907389f600c781eb156bfab9f6e110c85f2811dba74d3da36b44beabd7068d48508d84d208f14da4ffcb357db980cad6ae9150774d10ac8f6b147906462258a90c0cd5149c4f356c4301d50cdce20bb39b05ef610652bd1615af1b3687641b3c266d7cb562df98f6959338c9f4232f2af4196730c57b63e9579d7fd6e2621a4b78b87b406c9b6a66d9304655fde9bc5ca64fb469da3151815835467b92c88282cbc6991afe65e0fdc77621209ddaa1b39294ecd9e7cddbbea728a12bafa3ba0e3eb2026e1e7e21defded97e8aad8c86963b4d2c7eeae1db66d103258716cd687728a0e07d8751b23960ac49fc6a653f3d881c0ad9b1443ec3915da88d0865a8093c3ed8350345c57836b722a2255212936836ad78b33efeaaa7d69da4b406145c39f13a238b9946b5963db428280ffa39b8ec6bd5ec85adf3dcdcf91fe18d6ee4ae83e99e281e9fe9c4de42d0b5bd003c6dfc6c70bc018a19b72629eab440030cbaea9524239e45e23c25c53ecde41e00d364b6715ed4d2193fb30134f6b7421ea0520fe779af8fa76d27115621f4505c0b26feb0d2b19fa0b868cbee8e16378b438b996555fd55bb15991d8e390c512c739e4dfa6dcc854c468a54237b519559df714f3f20e428d1dd1a88b30e42ffc13405fb9eba476ebb82ea25d63f126d4eed24d62217d82a3be7090aec7077d484f2004a2665470d43863abcce83c174bb8df4aac931b7dd12d97c090d52be602ff2781baf690d4c762cc331b22df8b04624e7e3089490d6e5b9901a96332c12a2f0521638af67b74e8fce3e5bad5e554f7e489015093d127909c1589e63138662fae41b003cd37ebc6dde4ea1312eb708750c5d79e9dab2e1d963c697fbc1c6f58dd7a40af7fed4f92d27e335a6a16927d9208545863923cecc968f9940a4222c33a7c6e1f241a641effd8c747cab84102a5c70c2a32975d0be0836990f4950e8ea399bfe91275eafacc90294d0ecceb8043ff47bf4fd36df80d32997556d00d6ef537ea7f65f79a2a8db89afd5b2f98a49e80cc55560b502bfe84a037104dcd24a34c27a372feeae904fc3367498a491ed83b03084742484a599439a789ffb9e0a5a9326a6eca14f9dec360349f3a24b4f185a039187fc2a4faa4dde3eb38feb945065cdea6ff7a8e8df1731649ba43a42d1d09e8961a017fad8cba8c1ed9bde6c892141594701a4d6b24e60030b1cc3a0d2191e46024bb474908074f343c11f3e228510b8e7855ab777077b9d101dffe7c8fa30a33db36a36e14f0b44a0db221445f571cb332d00abc5b67027ae89d1b01d46efff912b6a1f31ce41317de8f10d97cd2cc42e422df7e7f2ebda12550ad37f5ebe9cd6099ad57107cf78eeeda21cbab0534fc71675938207204f988ca128fe3bf7578606e7caba32aba3250e04b14798df76f5016d6a8ad7d819a990205de39a17778deb0447addefc43c5c4182f3a7e1efd0ac16b0ffabdbeeb0ef8da105a9ab30acfbd7f6a26a0454548b4d6514bb7144a00427e1575808cf0ac027d106b737ca614abdeb1f3cb87a9381f963b8df736e697a52751b7a74e6a36a929d2165252f8365adb20dfc0a01f633a0f3cbc82832b92797878a542ad6da48ae507222b19a18ecd3fead10d3aa7afb20e52fd00a9975a8c4238743dfd699af0596aa45afeafdeac36c103641984ae1183b5cb1e83c27d4e98496ed2ff6fe8865dfe6a10b607760f1c91bd7eeeaca007e3e1778a55bc71cf36c2b8a7ad71e216c7c2a200378d7295e30c221c47c572c5bf49efe02d39fdc7f5e4572eaf572836386121093c08ecc5bf75a124e6226a917a5af8e22b3ed63c98cd4a41aee9127dc95724b5731b33e9413e3992122cece5e72d8e0190138472665af3d575f73fd3fdbf5e100c75000202675f78f291cd7e4db2d2e6abac94c23b2e742a3f1f4dca0c1aebbd7caa0a1c4bc0955120ee65d4b383653df83f9a86f8c757e20993c1af8a2796bf140a28bcc922c5848161fc8f1f366df015899837b61e020271d54ceaf5e0239c890b3772871b041dfeea05795ce38ce5b346b18283e90f646725a171b255ceea64850e32c229c9e2c6433108c47f837bc99e8dd1c69399381cfecaa0efabdba72e9270db051711c4ec4e4c042a0cb814cb6aba7241a9c29343f64e4375dc8fdedfbf6467e726b3985f2c3f1943d02e4ece6b4b1abca6678cfef8777464fab8b67f024770120ad51aba9dd7b49a830878053a32a97cc4455ae2abb88d0ee6688559161a6b3c208d9e799a06438444583d8702766d6d8d3e38929b21eddc304cea5d3998980ae90c716d05e465fa47990aba866c752b467d543d2ee63fe40e1e1947c8fc1af01e679c2851489700d5dfaa0a144da7d13ea352752d64799f8baae9962a3477e9a9ea89abaaf5e22582d8598221b15fc43ec2528734932e4b7235dfdeeaa18ca262a9b083cb60b0ad6ed85216f6fe86aa686b77506acd1710e6ab9d1c576bccbc97a0d4e0cbb1d8f2edac853f891fb2147a540e2d873fa66fcf67b7c4a917f134440ddc18f108d1f940fa12a15d0dfdb055f9b30848b39d18aee0e556447a67ab7a2555389e005b55dc840e73f0d17e32cbb1838c9cb39f773d833f0577d015b59fe08d1f547078d7fdc696be56de0f50934e3cf5a1d13fa5a64e944573c735e20eb1245afc2c9c48d413782933763066552abb5b7f83aebc1ffd0c26ee6faeb365d990802913ce6d7310af2dcc3a6374e3f4dc94672546565ee6eb1f0a16500e31b795e342acb12b717156962bed70a65ed329a9f87501fd104054048c3dfc1f598fe341ec0947b2b1b02e1e79709a53fa45b244447aebd8442dec5c3eb3c7a970ededd94cf9ec4e7dd7c026b58f21eabe9a12aa2cb6a6b91589369076fba6ce189753f933009b89fcb41bfe752c9ada44a97401b963ba27c72b5f98b08fd0267a38c0f63a51771d9c29a983e31641fa44b24154033eef073184b2a0e3ccd795448f9dd1d8a1deab2f514faabfea11bf773323836e98e55567dca65523bdc536042cae6935bb140fd4f41c00908d84db4a9baf1dd2719196008b927a71a4883a3b6fe55832341e31c59702465897ec72f8bfbb3b39b722b4d6f869c64737778302826e779aaaa98aae9c6dee957784dd4d694930053088e2785ccf8f2ec4f859b3cf402f8e5d7049961bfada700268439dadcc11272ced55d1cbf7f61b9361b8bb966d048ddc7bc0b7ef3700aae685054dc2621a3dc69977f8666deb5b2d78cad54845bd9f0fdb29916e0b5741d6c0e4916b1e878c624b0ebfdb93069f01cefd84f52c3f62691129ff1a415596363a3992f2882ac351615ec8394601efafd2d99a18930c05dc31dcb3b6c33bc096e051ea52bd24117f11ad13e715f9c1b11f56cc544b158b3f912650797e0462206e1a30b735f71cd2d3c2f0b94b617bf739ff00a0d34e1d2ec66e1a0eff834cefd753ecbefb820cd1ab5bb5049d7a166e4c8c5286df0facb18f1f7b6cb7bfa457880bd23e770f48d95050d943e1e0b5cb5a928e71c4465da1785df5f18503055f2a4d846e2bc0b23c1a8f46a241e84a1fb6ce1c2d2ef625f599606580f8c4307e0844ad982ad429d333daa7a30e4217faf4b6bce3a6a4c7eef20be84efd98d8cbd3d69dfef23e32a10cec69e57398943ef51a7474ac0b90d314fdbeedfa0d763955c943373971b94d415557eb7780085de0aa267fcbd524b09fde358860fc91109a9073adc3bfc3ac954665e9473a366665f9e93d4bf024ac090d622ee58b255c8b63ff4056057846675952af112e943347e953f0ae6f4894ef6fec993d2e77bcf27eb242f4d68d0c35f8f2ccafe34f23851be38a90d423ea7ddbad05ae5c65272dc4bf76094da89106f6fc22c1db7d698e8c3780a7acca5de82444f544726e3aa7a42d3e8e96b7ef3779e8886bf6a78d9a66bc69c75df4d16edf2748e999803691af8ed86967ae47aa6f59ce4740fba7020ac71b0fc57fd35ee2761491a4b99bd841200614abd54fd06a67b7de2c5cd02586a6de2e819ca2eaa30764c0e39afd8193c74186d4377e29e6c8b6e315a0d7f21060b13bc74e350ef9448eec21668d632e6d889a089bbe279845a374bc2909da6fd9b96a62cf9ed526b571408810f64bf66507c5d85270bbc9e8f534858cf45a10582b7fb86f8a6f66739304a865ce6cdadbdb1b72c0aaf2b7a9339b2cdd4a968d97454efab2bee9e9afb6086f7a30746f6ea0aea154349791c3c3fe700e847df9180b8b958d39b8566f7b2624fceb84be436c78c37e9e20d8de8f57bf6aa839a845018cacc47e5d5288e80bb8e57fe18625b7ebd32fa02c24e4c4c2ff08ccc3e4356de815193d6726dc118eeb9884b2d5483f2b589ed023372658f54770132e67b3e44d714d4dadc65becbae38b871da9f4d19ee1bdb6323045484d0a0350cb9ec0f637abc9d1df8f66c17a1494a91ca0a88b85659a810fb59c53d0031c5b441f11132d61f78dc910e6423c4c88fcdf786ecbf79c03db8a3f0c2809d5c70611bf6a111356ac676d79b6e203abbfe2bd9d47929d3906b1dfc652ea140d0546799259a6b14022608928400a2f2c3d77da0a3a5a0511a648054fd2f6f13ed6df2a5dadba91d34e5e41fabfa84e23cc99e77d3a6f1004dcf4930a0581a9ba5743d5d7aff1dbc1576e0d0d721cbecf7c5c26ebea3ad819b9fa77501f38cb5bdb6a9bc410b68c0fbead7cda29922128273590825b3ebb90a71f3364489dec0b552610ea56f0ecf6b686f4682d6aca648117b85ca5427b056085c7964ec7e2627125edda13bb2f93b22c9659782ee2cd4194ff59762a5ee5f37441385dae0276bc96b4e4bcb8500538f96486ca2df88a9ef59c652625bf02b1c7f830c8c56e981dad8385569c4c943fed7e91a3cc0ca4d24999d900f0e64ad5d54d36309af8a483b1f21d4e8359eb6f15aa24553e0c7a9b6974e61af4af4dfe49f8cecbb4c7583618e7b3c3a4bcd4b07c6fbbc0137f023521d68f657392e44409272af0f42ddb1727aa40a9ba277f8e4b5b069e0a2a0f89c31db0b3cb639c6b4a25b7400e499b1912e9be3139348bd8a2e3260627a7458b50da0965bf58e043563e3f9d28032faca42ea98ee7d449ca6076a3df6fc1e8f7dae55357ceb46b94d75fd3f88529340cbbbffd5d31ee4083bed74f7e5a7fc7e252ac1391fe8f5e33df517b1d3b2eea99047934c75e3f77235a9a1d4aec999afa6f6cfd23e711eed55c308adebf74689ecd5c504973960c505f8d541c82a8fa203a577856f57e0a4b711ec4daf1d60ff59ee75acf389caf1cb464b4f8aaaf8c4da0529ba9d4e8f46d7fca4677264129d5e08985fa4756a7dac759df1107004f551590557fbb41c0b03abc7be3cae8470846e041a179ca3f4bb283de0df3a0ecbdd5c4f1d246f32e306e12adf1b2182f5502567757650c86fcf47365c26f3b8613f3"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) 18:21:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800e40300000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1524.896464][ T392] print_req_error: 9 callbacks suppressed [ 1524.896477][ T392] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(0x0, 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1524.943066][ T119] blk_update_request: I/O error, dev loop1, sector 19328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1524.954926][ T119] buffer_io_error: 4 callbacks suppressed [ 1524.954934][ T119] Buffer I/O error on dev loop1p4, logical block 2416, async page read [ 1525.042692][T18061] loop3: p2 < > p3 p4 [ 1525.047186][T18061] loop3: p2 size 2 extends beyond EOD, truncated [ 1525.056345][T18061] loop3: p3 start 225 is beyond EOD, truncated [ 1525.062653][T18061] loop3: p4 size 3657465972 extends beyond EOD, truncated [ 1525.072388][T18064] loop2: p2 < > p3 p4 [ 1525.098642][T18064] loop2: p2 size 2 extends beyond EOD, truncated [ 1525.105699][T18064] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1525.113785][T18064] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(0x0, 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:30 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000007a8000da55aa", 0x40, 0x1c0}]) [ 1525.233214][T18072] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 1525.264027][T18064] loop2: p2 < > p3 p4 [ 1525.268300][T18064] loop2: p2 size 2 extends beyond EOD, truncated [ 1525.275288][T18064] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(0x0, 0x0, &(0x7f0000000400)) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1525.282884][T18064] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1525.315179][T18175] loop4: p2 < > p3 p4 [ 1525.321262][T18175] loop4: partition table partially beyond EOD, truncated [ 1525.331217][T18175] loop4: p2 start 996 is beyond EOD, truncated [ 1525.337681][T18175] loop4: p3 start 225 is beyond EOD, truncated [ 1525.343997][T18175] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1525.368155][ T155] loop2: p2 < > p3 p4 [ 1525.372327][ T155] loop2: p2 size 2 extends beyond EOD, truncated 18:21:30 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005080800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1525.379721][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1525.387738][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1525.515874][T18288] loop2: p2 < > p3 p4 [ 1525.520293][T18288] loop2: p2 size 2 extends beyond EOD, truncated [ 1525.527393][T18288] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1525.535080][T18288] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1525.567675][T18287] loop3: p2 < > p3 p4 [ 1525.572344][T18287] loop3: p2 size 2 extends beyond EOD, truncated [ 1525.579314][T18287] loop3: p3 start 225 is beyond EOD, truncated [ 1525.585543][T18287] loop3: p4 size 3657465978 extends beyond EOD, truncated [ 1525.694123][T18288] loop2: p2 < > p3 p4 [ 1525.698443][T18288] loop2: p2 size 2 extends beyond EOD, truncated [ 1525.710413][T18288] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1525.718253][T18288] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000fff00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:31 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00ffffff808000da55aa", 0x40, 0x1c0}]) 18:21:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="a744a48922f31c571a951a49348a1baf83605a03cda4070b369bd066e66f78c6a835b97984f278eb9fa3674ecc76428173d8e9428b3d47948ba2b627e2eb06bf2441cba71a8b9531f481eb7f7f7753ea597236c5a626855c71b705ea2b1c74d75a469cf8f9f9e12d1262354c1b39dd2edd86db5aceaec2949d303f4d96f23031fb5be10b8539fc15c8896a7f707c91c742ff2b558e0908079e0b0a3cd19056e21e05ceb6d89fe553ba4d036427fdc68ccff411ef96fc2b63337c224e9ae8668907cd6748ff5b32541e641f0e18ec8199e914dacbe92d02a32c9baf3b152c183c73e42f64437165376c39c036930afcb615372d04c8332e7f1727be318822ed19e3b6de67a8c51c9a269ed75a4071f2482f5592c67ab7526fabb5039ce1b43113358409e251654894a7c1134782ad371c8de2a92d280a3eded841815e9e18a2a5ca51662ff5493aa091b433d2ec94569a529b2382a375afd55d644122dc54b012bb3ec2ac3c57186178f447a822619a9e57a27a921164072ad6e392d0a4f2c2ba5ac26aa1e38c9ae0b8de4aefd10107994c918a6f1a773a2bfaed92f42803af59ad119e1e0053b5fde16da6047c4844c20f51733cebcf4a02aa407ec0b9e96d3fd4031326c6a7208e22862f928590dc9df295be4c5a3d22c1afc71014b0b679150184d8b7b1cc80251e09917406c095f03676ca56a98969184a6907e1c7684772b9a3bb4a4f69d9e24706ee7bb09ccea07e756e480f44bea75736a1b78f2ba4ed63eb55a3f12be9a92f9631fdcc715d99c1313baf5b65ea3ff5e6337808b74750eb02d105a71e5832b8dba39c019d9b096e1cf15b3196026f5445eefd5d7362fedef6254675bfccca6a78ad76adf80333721542905043634efc485b2e189a2742d3111bff858a4fa7ce3d325e46e67335934305f6df2a2026826f052ddbd8c02cdb1738a4fab0a82eace56d126c7ced08cce3d7444586b027b5e757d221f0209f08ac496d35ccfc5d64e08c9afa97174ac6af5ee1d4893cbebe62d4c684b6c2d7f9d3a043855652ea4b19468090427dbb142dd966c0bad31f30284562055da3b3f6042ca2f68fdd24654dce2ede8df51666ca9251467bcc0d5f6a5488631726d66de5bd6da44298dd0c7644baa410c58d013db73fd0f3cf1544dfd1472ae4add07df1957f20c09c5779b51cc783046d5c8719069a39d69d6f59770c2bbeeeb77fc04c8499214d30290d2ca02e6e50bb915371bd9ffdc82e787f6d148f2ade0b39b77cf793f698d70a101090dddc50b7b4257d3e4409c36827e84f9bd076e88b3d86f972fa401acbb1dab642f2c2317212c8fe9adb1aa9850593ee0849661c8ea9478e8f139c5ee7281bfc8f7a34bc8e7742823f5bd23df7d241f7b0318cbc51710d3050416d6e69f59c0952a6c78c4f0e688342bbbabf814dd8dd0e6f833f9c2bcdb34bdaba76b7b58cd72cc2aa4a1fb3046a41187141918764e40e87184bcdc91a79f159f96709ef948efcda183fb4186c2b3117abc60348a41c8bf5701d25c611d9f4690c5119ed1ed553d708bfd5e34748483f088ad9e6c08097e32fca7626004363560313b9e57547f2bdc88d8f35f52f9594dee0f48860aee42f5a123d1f7da914aecbe7715e0eb16ae0008777cd6bf32b52f9e1d8ccf04388989524a0a2b7f783e66361f521038ceb9d6e12f2fa5a7755a39143891ff7c8b4a065242f5009ed44109be774ef7e4164b6416a5001bf891fe057ffade370762ba8145bff62885d82c4e622e4c5107355f717fff2e5b51227306b8e95ec65a2372d7e88b92a26a1283d6b63ee2e3345ef7aeb7148680ea4f791606a9e6d9ce3aa4eb2caea27604ed876e56e9ef667f17e081e2f969378785bc5e33625c85169558090db17aeec0c6fb66efeb14e61eb9d1b38eed83af4eb40b424e0704a1564385934ab73cbe874ea3fcee5ae3f348faf757125e1ddf19395a9d1d021184fcad056d4ee63fc1ab39c3ad777bd00ffa468883f1fa03f5c35e9e4a29afcb63de0f895c5ad57f5be01724b13953851820d0a0c9d028128bbbe92bcbc00d14e980fb8aa8c2592b347df1176f0c26c974c98f722f021b683c2c68d42d8ca5ff35c92d08e954da3087db71d15792e0abdf3005408f9cc1024e0c7a28b884f4acd15ac44ccdfa33d78de270d674a363f6fa2a794f95ef09b8129c07d42e7f069811c3c8f5697791b8ff79eb893ef4892b9692c5dde0a41422caaa0aaaab3dc41dfed18230bc570a1a4c4c9b9c9344d2bc1d1a40f1c0de0e97f312fc82976ef4b892c6f5a215bd41aa5ed3fc5fa2bdc95fc224226e3a3535f7835298c5c805f6d13234216c7c13feefc57e2ed8e11dac0b5a74ba4e9958906cf284ccb4801dabf621d8a9ad9a565e6b219509ff536bc871b8c91b700559a919e3d07407bd5ec7cf9d21af03ad61429816b1e1495cf75e647968bcd80371b5a87e2dd74f056e54acc4630c751352e40332cd77558294a286ea5c773d0160d1a0efba80a16f651fbfa017c99e92c996ec71c63ae05ed7d704d5a0049b2dfd29e98f033ca9faad35637385747fa1d8e41a46f6ed1182a5bdfe7c280f2d1c0e77bda18167e0f939c2b023095d5723a09a4cb892c6590cc98a25153430f3a0bb75556b6ecf92557c939906408d18da4c60a1021596c338c641d7fcf1cea4592a33c284ae4d12664c94931e0cc90d9ae8d7bbfc60da071cb1e56d404a24a35f758d26775b3a8d0c536a2121ffdcc35c4ac37f2dc97033946b229214dbaa6d2c87d9fda9d5905c3d5a6069d7fc4eaecacc8667a1228460e61842bb088818f625fb8f11b1400c8e566f18e351167e1a26e9b18753b7f174b6713e54971afb80770d56e9d6915bb18f22601664e9e5d387e6d02d90f6ef41dac2fa37e080c8836ecadc12986ae206a06becb085d12abd6d77185e57802a9bb61176ba3cf2f79371cd311036bfdb1aae2894f3c79930f881e64eff892362cf73e9d5a1f03859dce3f4a2e84932cb8eddf1665b8fd9710efde4930347ec453435c9739dc38f802307d3f4834d09e9c5323f5e63abb5e7381bfae3234c70378c06ef683b35e3eab9a1af0b9266071b8544e0cfe44ec28ae10a699fc97302f7cdd1df0f874b62e19da15ae2c6922a4c17929923c5691a7db01a6e2238c1a6353319f6ba229e0a6a88e400b409ca49f84c66ece974ff29f4951a14eb449fe018fdabf26a63681b650772c756a41c206c71925277603d40b885d6c568787ed080af1d47a418df8069eb2d3100c40e14feaca0a28287598f9475f4b162e2d489a44f0e0ec0562942a93e3f132f968c2ecf200a0ace4b1d39780af665d073edae055dbf40bf7f404ec6325953872eba19c4c22493a975c9c9d6ec967ad124ae74131a56a5064bfb94749efc17ce120684963fe17b3cf713380f220bebee3b8a2a1b6c6ae03dda9baae2f33683a884b4a46120b5d9af9b34833b1e5a4bebc4353c50185ecf15d5188fc63b9c8fbf0b3832a54d4a757815c7c87bcbda020be4ec38ed84ede46120b737bed6ea4e30b6e71eb89b8fae89d83f6707f561bbccb07aa44104fe5c5a39cf23dd441aa74b529fca7d254106238c6334deb1524636847d9c53f0ecc4f48c3bd7ade51db0c3025e1f3cce098db17c151e2f24a7b398a1f68275e4b4e36d8b1f7285ba7173c32432e1180abe16f2117c975cc027e0aa834e8da37591486f656608b9ef085d4fa705496f84801f57246926125e2939812825a96baf851ecb9a06824d35b7729d798f908ac37643659c1d2641d216147625a221204c51682569ea1adb80ff3d0c24eb5534b9950fd40563cca364d9858331a81763e51a8b8b9fc38e501f030d2424f6f0bb2e19c52a95be998eb4102f8306e78d76eb16be034ba557fb73afce9548fec5fe1fc44c481cd69e6fcac1cd717d371eaacf7ae7d9bfbc1a10b9a47d5e22b7862995f5ce40990c4a04e7bdaa60ce6587984f04508d6eff44d2701c450cd8aec9a3f68a108a5d96b997c8534ff994a8835246b4b3a04f767fa713356bcd52fbfedeecc19e685cb50407afdf5cb863145beeb40d288a6a3cd1aecf977e94b6a3aaff35d808a89ca61e9e90b470c5ce8795e88ccc243836a4c3114f8f2a0d9f3d24461c4217a615199af841e72a5571f333ef88d236a98edec65470f545bb024461412a571fb332936215c1e6cfb0e9d2f0b2f40a548f24543a0f0cc860b44d4b7ce99878b40145699a7af699d421d2a90a1b11d31001162a23287acbee41898b7dcd685643b52683a479f76f8e0a2f731a3269000216d3b7c981a65e7a523621984f60a92a731e42e7287b059031935f07ae78650b936918c27591676ca5a8f10ad4d2b47c7655376b10ac821829e9019c4e81dafb314195458082069406d0a3611ed1f54e8bdfa68e7508cf022c37f73d03dd491bc82770925812471aaf582d81712fba20b4edaf1b930105ce03024307abebfadc94d4745403ac51777323edb453f20a7da04d54d3f7c8f317dc0411b308fb0faf92b587af5569b5ba4e98531b3e9dafc45826262b967c619fc8f98ff7d6e262b685194b5d412e1f2666b623328533036188e84a668828364988d9e6b71c6eb7445e17c7a6d03269374db16333dd816538ac1e4c7c053e8f4203e3baabca1ed08bbd9f315f2579346bb2f584b7d3d768e4077a906b2e6b2be1ac0a4d957d59fc24ba46aca3063b7829c528841a35c83d8fa151f2977695c0ea738d2677e5fb90c7c81bad22deb07b276128beffbc02ce130807dff510424f88113def5e2099c9df0e37f9c74829761d24d3ce20d2f99b99b4c471857a05ccb7d914efb5d07580478fa432719baf4612a6b1cbf6fe35fc853a2b8e0c1c56fc4b0c2ba7300b18a5bacd26ccfbe72d24b07ac7f2f0afda99680c57b99f4f24c67e2d52e441df3bb62a3e9507d4fb2dfaf6567ca48f2dbefb0b533b37d9fe059ee4e4fe5c1bbf41673b982dab5bb6175243d8c60e3cc35e766d5967a2cff8c75ccea940e552ccafc81ec78ae490ecfa843a4448450bc6213e83be410147210c38e55585f647abee2be8086bb49f67f6cbd02ef777273df61e0d6a13e12799a00faa0c6e32af2c08e83ea5cb752b1242740273ff0af3d04c3f45ee4bb0271a4e4e8556d432e168bc04d4f6cfd1619b7ecca1be32c62ebec9b43ced512f22324db9a7b083eb7c9938053f02cd86e716d1726250da1fc49894f1f69cc70f432e1dc7700ba84e1a88d9212dc6cf710e9e22eaf32bbf8cc611f057219a63a541f4b62f40f87204f6ddf8f6618f8cea01b1864f75c65ae46571895c7b17eda09ad600fc0e08a984506b288b8fefc78f3b764f7d1218c2a2a01dc9cf0788ed019314a92f3e47fa891737c30e1912e1170839ae819b670c6c23e06c742034fda67b1d5e9a4d33d4402bee38d7c39d09ae42654032afab88b87b7aaf4fa4d042d23cc7ae3054ba15ae9395e53a6c1531cab15a02d75d6b7fa200208141945ce2377a69a18477e62eaad512a0c7ece51faae5905ea9f18adb8c16c8c1901c5f973b0fdcc75078bc0bd84388bafe7e8399f4355dba777ed0349e2144d6b7a69105650d7ce7cbe5ff874205b0295cca1239f9edf3a94528a8baa7fa1d46fc393596b49150edbafc210b1dbd6fdbcf6569842afd6b6ad35424b692e7f07992bb25f10264177e3e288aa610b4eaf1d0ec1f4a6f3c4a2c1392bfd490828667adb5bb6dd3ab82729a893db002bdb8b3749c3e45d8e8c04959a9f63afb28f1c12b0a70dc80562d001caefe4b4"}, {&(0x7f0000000180)="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"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="a6d88ad55acea75775102bf01079746d57d868d7ae3959b3cd2eb7539b76fbcbe7e9fa4ad5c6882e389cc679269d1fb75940a20016c9277fdfc90447e1e469bde6273d6913f2117273eb3da548007181674b15f3a8fea05347c420501adb78d9608c9d920c4c57b565e0c857e989f698ee4860813706c6e960061c7bd8a945e7c0bb904dd9108486570e7c4f6c8dbe570699d415eaab64c4b6fb86e93bddd7340907b1b48c798f8bd25e34917ead5b1bdd97e70fe844f88e780c8d941924fe8bdb1d08d93701a785364654458fa3aa33518ccb15e47ba44332f9f4153598179eaa5f1c831a705f6079f907389f600c781eb156bfab9f6e110c85f2811dba74d3da36b44beabd7068d48508d84d208f14da4ffcb357db980cad6ae9150774d10ac8f6b147906462258a90c0cd5149c4f356c4301d50cdce20bb39b05ef610652bd1615af1b3687641b3c266d7cb562df98f6959338c9f4232f2af4196730c57b63e9579d7fd6e2621a4b78b87b406c9b6a66d9304655fde9bc5ca64fb469da3151815835467b92c88282cbc6991afe65e0fdc77621209ddaa1b39294ecd9e7cddbbea728a12bafa3ba0e3eb2026e1e7e21defded97e8aad8c86963b4d2c7eeae1db66d103258716cd687728a0e07d8751b23960ac49fc6a653f3d881c0ad9b1443ec3915da88d0865a8093c3ed8350345c57836b722a2255212936836ad78b33efeaaa7d69da4b406145c39f13a238b9946b5963db428280ffa39b8ec6bd5ec85adf3dcdcf91fe18d6ee4ae83e99e281e9fe9c4de42d0b5bd003c6dfc6c70bc018a19b72629eab440030cbaea9524239e45e23c25c53ecde41e00d364b6715ed4d2193fb30134f6b7421ea0520fe779af8fa76d27115621f4505c0b26feb0d2b19fa0b868cbee8e16378b438b996555fd55bb15991d8e390c512c739e4dfa6dcc854c468a54237b519559df714f3f20e428d1dd1a88b30e42ffc13405fb9eba476ebb82ea25d63f126d4eed24d62217d82a3be7090aec7077d484f2004a2665470d43863abcce83c174bb8df4aac931b7dd12d97c090d52be602ff2781baf690d4c762cc331b22df8b04624e7e3089490d6e5b9901a96332c12a2f0521638af67b74e8fce3e5bad5e554f7e489015093d127909c1589e63138662fae41b003cd37ebc6dde4ea1312eb708750c5d79e9dab2e1d963c697fbc1c6f58dd7a40af7fed4f92d27e335a6a16927d9208545863923cecc968f9940a4222c33a7c6e1f241a641effd8c747cab84102a5c70c2a32975d0be0836990f4950e8ea399bfe91275eafacc90294d0ecceb8043ff47bf4fd36df80d32997556d00d6ef537ea7f65f79a2a8db89afd5b2f98a49e80cc55560b502bfe84a037104dcd24a34c27a372feeae904fc3367498a491ed83b03084742484a599439a789ffb9e0a5a9326a6eca14f9dec360349f3a24b4f185a039187fc2a4faa4dde3eb38feb945065cdea6ff7a8e8df1731649ba43a42d1d09e8961a017fad8cba8c1ed9bde6c892141594701a4d6b24e60030b1cc3a0d2191e46024bb474908074f343c11f3e228510b8e7855ab777077b9d101dffe7c8fa30a33db36a36e14f0b44a0db221445f571cb332d00abc5b67027ae89d1b01d46efff912b6a1f31ce41317de8f10d97cd2cc42e422df7e7f2ebda12550ad37f5ebe9cd6099ad57107cf78eeeda21cbab0534fc71675938207204f988ca128fe3bf7578606e7caba32aba3250e04b14798df76f5016d6a8ad7d819a990205de39a17778deb0447addefc43c5c4182f3a7e1efd0ac16b0ffabdbeeb0ef8da105a9ab30acfbd7f6a26a0454548b4d6514bb7144a00427e1575808cf0ac027d106b737ca614abdeb1f3cb87a9381f963b8df736e697a52751b7a74e6a36a929d2165252f8365adb20dfc0a01f633a0f3cbc82832b92797878a542ad6da48ae507222b19a18ecd3fead10d3aa7afb20e52fd00a9975a8c4238743dfd699af0596aa45afeafdeac36c103641984ae1183b5cb1e83c27d4e98496ed2ff6fe8865dfe6a10b607760f1c91bd7eeeaca007e3e1778a55bc71cf36c2b8a7ad71e216c7c2a200378d7295e30c221c47c572c5bf49efe02d39fdc7f5e4572eaf572836386121093c08ecc5bf75a124e6226a917a5af8e22b3ed63c98cd4a41aee9127dc95724b5731b33e9413e3992122cece5e72d8e0190138472665af3d575f73fd3fdbf5e100c75000202675f78f291cd7e4db2d2e6abac94c23b2e742a3f1f4dca0c1aebbd7caa0a1c4bc0955120ee65d4b383653df83f9a86f8c757e20993c1af8a2796bf140a28bcc922c5848161fc8f1f366df015899837b61e020271d54ceaf5e0239c890b3772871b041dfeea05795ce38ce5b346b18283e90f646725a171b255ceea64850e32c229c9e2c6433108c47f837bc99e8dd1c69399381cfecaa0efabdba72e9270db051711c4ec4e4c042a0cb814cb6aba7241a9c29343f64e4375dc8fdedfbf6467e726b3985f2c3f1943d02e4ece6b4b1abca6678cfef8777464fab8b67f024770120ad51aba9dd7b49a830878053a32a97cc4455ae2abb88d0ee6688559161a6b3c208d9e799a06438444583d8702766d6d8d3e38929b21eddc304cea5d3998980ae90c716d05e465fa47990aba866c752b467d543d2ee63fe40e1e1947c8fc1af01e679c2851489700d5dfaa0a144da7d13ea352752d64799f8baae9962a3477e9a9ea89abaaf5e22582d8598221b15fc43ec2528734932e4b7235dfdeeaa18ca262a9b083cb60b0ad6ed85216f6fe86aa686b77506acd1710e6ab9d1c576bccbc97a0d4e0cbb1d8f2edac853f891fb2147a540e2d873fa66fcf67b7c4a917f134440ddc18f108d1f940fa12a15d0dfdb055f9b30848b39d18aee0e556447a67ab7a2555389e005b55dc840e73f0d17e32cbb1838c9cb39f773d833f0577d015b59fe08d1f547078d7fdc696be56de0f50934e3cf5a1d13fa5a64e944573c735e20eb1245afc2c9c48d413782933763066552abb5b7f83aebc1ffd0c26ee6faeb365d990802913ce6d7310af2dcc3a6374e3f4dc94672546565ee6eb1f0a16500e31b795e342acb12b717156962bed70a65ed329a9f87501fd104054048c3dfc1f598fe341ec0947b2b1b02e1e79709a53fa45b244447aebd8442dec5c3eb3c7a970ededd94cf9ec4e7dd7c026b58f21eabe9a12aa2cb6a6b91589369076fba6ce189753f933009b89fcb41bfe752c9ada44a97401b963ba27c72b5f98b08fd0267a38c0f63a51771d9c29a983e31641fa44b24154033eef073184b2a0e3ccd795448f9dd1d8a1deab2f514faabfea11bf773323836e98e55567dca65523bdc536042cae6935bb140fd4f41c00908d84db4a9baf1dd2719196008b927a71a4883a3b6fe55832341e31c59702465897ec72f8bfbb3b39b722b4d6f869c64737778302826e779aaaa98aae9c6dee957784dd4d694930053088e2785ccf8f2ec4f859b3cf402f8e5d7049961bfada700268439dadcc11272ced55d1cbf7f61b9361b8bb966d048ddc7bc0b7ef3700aae685054dc2621a3dc69977f8666deb5b2d78cad54845bd9f0fdb29916e0b5741d6c0e4916b1e878c624b0ebfdb93069f01cefd84f52c3f62691129ff1a415596363a3992f2882ac351615ec8394601efafd2d99a18930c05dc31dcb3b6c33bc096e051ea52bd24117f11ad13e715f9c1b11f56cc544b158b3f912650797e0462206e1a30b735f71cd2d3c2f0b94b617bf739ff00a0d34e1d2ec66e1a0eff834cefd753ecbefb820cd1ab5bb5049d7a166e4c8c5286df0facb18f1f7b6cb7bfa457880bd23e770f48d95050d943e1e0b5cb5a928e71c4465da1785df5f18503055f2a4d846e2bc0b23c1a8f46a241e84a1fb6ce1c2d2ef625f599606580f8c4307e0844ad982ad429d333daa7a30e4217faf4b6bce3a6a4c7eef20be84efd98d8cbd3d69dfef23e32a10cec69e57398943ef51a7474ac0b90d314fdbeedfa0d763955c943373971b94d415557eb7780085de0aa267fcbd524b09fde358860fc91109a9073adc3bfc3ac954665e9473a366665f9e93d4bf024ac090d622ee58b255c8b63ff4056057846675952af112e943347e953f0ae6f4894ef6fec993d2e77bcf27eb242f4d68d0c35f8f2ccafe34f23851be38a90d423ea7ddbad05ae5c65272dc4bf76094da89106f6fc22c1db7d698e8c3780a7acca5de82444f544726e3aa7a42d3e8e96b7ef3779e8886bf6a78d9a66bc69c75df4d16edf2748e999803691af8ed86967ae47aa6f59ce4740fba7020ac71b0fc57fd35ee2761491a4b99bd841200614abd54fd06a67b7de2c5cd02586a6de2e819ca2eaa30764c0e39afd8193c74186d4377e29e6c8b6e315a0d7f21060b13bc74e350ef9448eec21668d632e6d889a089bbe279845a374bc2909da6fd9b96a62cf9ed526b571408810f64bf66507c5d85270bbc9e8f534858cf45a10582b7fb86f8a6f66739304a865ce6cdadbdb1b72c0aaf2b7a9339b2cdd4a968d97454efab2bee9e9afb6086f7a30746f6ea0aea154349791c3c3fe700e847df9180b8b958d39b8566f7b2624fceb84be436c78c37e9e20d8de8f57bf6aa839a845018cacc47e5d5288e80bb8e57fe18625b7ebd32fa02c24e4c4c2ff08ccc3e4356de815193d6726dc118eeb9884b2d5483f2b589ed023372658f54770132e67b3e44d714d4dadc65becbae38b871da9f4d19ee1bdb6323045484d0a0350cb9ec0f637abc9d1df8f66c17a1494a91ca0a88b85659a810fb59c53d0031c5b441f11132d61f78dc910e6423c4c88fcdf786ecbf79c03db8a3f0c2809d5c70611bf6a111356ac676d79b6e203abbfe2bd9d47929d3906b1dfc652ea140d0546799259a6b14022608928400a2f2c3d77da0a3a5a0511a648054fd2f6f13ed6df2a5dadba91d34e5e41fabfa84e23cc99e77d3a6f1004dcf4930a0581a9ba5743d5d7aff1dbc1576e0d0d721cbecf7c5c26ebea3ad819b9fa77501f38cb5bdb6a9bc410b68c0fbead7cda29922128273590825b3ebb90a71f3364489dec0b552610ea56f0ecf6b686f4682d6aca648117b85ca5427b056085c7964ec7e2627125edda13bb2f93b22c9659782ee2cd4194ff59762a5ee5f37441385dae0276bc96b4e4bcb8500538f96486ca2df88a9ef59c652625bf02b1c7f830c8c56e981dad8385569c4c943fed7e91a3cc0ca4d24999d900f0e64ad5d54d36309af8a483b1f21d4e8359eb6f15aa24553e0c7a9b6974e61af4af4dfe49f8cecbb4c7583618e7b3c3a4bcd4b07c6fbbc0137f023521d68f657392e44409272af0f42ddb1727aa40a9ba277f8e4b5b069e0a2a0f89c31db0b3cb639c6b4a25b7400e499b1912e9be3139348bd8a2e3260627a7458b50da0965bf58e043563e3f9d28032faca42ea98ee7d449ca6076a3df6fc1e8f7dae55357ceb46b94d75fd3f88529340cbbbffd5d31ee4083bed74f7e5a7fc7e252ac1391fe8f5e33df517b1d3b2eea99047934c75e3f77235a9a1d4aec999afa6f6cfd23e711eed55c308adebf74689ecd5c504973960c505f8d541c82a8fa203a577856f57e0a4b711ec4daf1d60ff59ee75acf389caf1cb464b4f8aaaf8c4da0529ba9d4e8f46d7fca4677264129d5e08985fa4756a7dac759df1107004f551590557fbb41c0b03abc7be3cae8470846e041a179ca3f4bb283de0df3a0ecbdd5c4f1d246f32e306e12adf1b2182f5502567757650c86fcf47365c26f3b8613f3"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 18:21:31 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005090800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1525.764730][ T155] loop2: p2 < > p3 p4 [ 1525.768960][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1525.775915][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1525.783557][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800020400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1525.973799][ T155] loop3: p2 < > p3 p4 [ 1525.978075][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1525.987649][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1525.993980][ T155] loop3: p4 start 4294967040 is beyond EOD, truncated [ 1526.001775][T18502] loop3: p2 < > p3 p4 [ 1526.006131][T18502] loop3: p2 size 2 extends beyond EOD, truncated [ 1526.013035][T18502] loop3: p3 start 225 is beyond EOD, truncated 18:21:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008504c0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.019409][T18502] loop3: p4 start 4294967040 is beyond EOD, truncated [ 1526.037297][T18592] loop1: p2 < > p3 p4 [ 1526.044054][T18592] loop1: partition table partially beyond EOD, truncated [ 1526.051345][T18592] loop1: p2 start 65295 is beyond EOD, truncated [ 1526.057786][T18592] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1526.065547][T18592] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1526.175800][T18610] loop2: p2 < > p3 p4 [ 1526.180103][T18610] loop2: p2 size 2 extends beyond EOD, truncated [ 1526.190137][T18610] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.198339][T18610] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1526.213598][T18616] loop4: p2 < > p3 p4 18:21:31 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00ffffff978000da55aa", 0x40, 0x1c0}]) [ 1526.221639][T18616] loop4: partition table partially beyond EOD, truncated [ 1526.229146][T18616] loop4: p2 start 1026 is beyond EOD, truncated [ 1526.237103][ T155] loop2: p2 < > p3 p4 [ 1526.243389][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1526.250368][T18616] loop4: p3 start 225 is beyond EOD, truncated [ 1526.257143][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.264518][T18616] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008504c0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.272401][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008504c0000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.375690][T18610] loop2: p2 < > p3 p4 [ 1526.380213][T18610] loop2: p2 size 2 extends beyond EOD, truncated [ 1526.387367][T18610] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.395094][T18610] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1526.414099][T18685] loop3: p2 < > p3 p4 [ 1526.418319][T18685] loop3: p2 size 2 extends beyond EOD, truncated 18:21:31 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050a0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.425329][T18685] loop3: p3 start 225 is beyond EOD, truncated [ 1526.431497][T18685] loop3: p4 start 4294967040 is beyond EOD, truncated [ 1526.439212][ T155] loop3: p2 < > p3 p4 [ 1526.444107][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1526.451020][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1526.457489][ T155] loop3: p4 start 4294967040 is beyond EOD, truncated [ 1526.469540][ T155] loop2: p2 < > p3 p4 [ 1526.475761][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1526.482588][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.490496][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1526.538275][ T392] udevd[392]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1526.593836][T18831] loop2: p2 < > p3 p4 [ 1526.598154][T18831] loop2: p2 size 2 extends beyond EOD, truncated [ 1526.605357][T18831] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.612885][T18831] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1526.621724][ T155] loop2: p2 < > p3 p4 [ 1526.625880][ T155] loop2: p2 size 2 extends beyond EOD, truncated 18:21:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000000a000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000009a8000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500087a000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r2, r3, 0x0, 0x7ffff000) read$FUSE(r3, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x2, r10}], {0x10, 0x5}}, 0x9c, 0x3) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8fa867aefcb7a5791385f6603e7164c0349918cf75ef5c7af54ef3da03621ba3fe8367c952a0f502a1b934b4b439c9"}, {&(0x7f0000000300)="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"}, {&(0x7f0000000180)="686a2b53cc2a1991844e0c9e8536deae9343afec4d39c580435279df7a477bce1eae7d27bae884419e2192ac85261f21c4293d3b801b388a6d180ae50c26ebff890091f31732474edebd8c03b2a70f65124863de666dbf1c9340f77711337f4f4b9a878143692f6a8978f6033330649a6b8589264b19dd56d5473ed12e3ba3a2d156d720620774ff0ea3fe50a8b2241ff6f4b05d251042c322e9c0cebac00b6222be2f9170840002d8f693ef739dc871418bcb698b66d3b151283d800333c1ff5b89588bce8293589e09f02aa7aa949ecf87db32e9d8d5a019c2f3afdef195bb79564753c7c61ce7d65b648ca8624ae1fe51effe397ddaeef8a5"}], 0x0, &(0x7f0000001300)=[@rights={{0x0, 0x1, 0x1, [r0, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r1, r2]}}]}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="65fc8d2cc5b8d789a11a38c32d8c3dd56f2afa75d7256c1650f95c4123a00c738e179f8a3f5203d71161d0ced569dbd5651a6325ad2f9dccf5c69cd7c7c345edab3d"}, {&(0x7f0000001480)="d7dec3cc46c3db5f9275643d9917719a9ec2769f15c486b665fcc30845a38b0876c9cf197b1aa9d2f963a1e0537394707c25e6268485073e48291f5fd03e7f3ab735401a00b10fec227f33a675f5b65afb033244d7f28bf814be9fe46309eaa1f1887370161fbddf4b7c466ca050"}], 0x0, &(0x7f0000005580)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r10}}}, @rights={{0x0, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x0, 0x8004}}, {{&(0x7f0000005640)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000005780)=[{&(0x7f00000056c0)="6ab7c3515c22c124ae0b9b5a79a11bb84967eb37047b90c052d3a58433471c11b14ef506f5e1d732cb2f916fedaae60d78b44dde2dc99c613670ba84a3af137d33709483f727b083ee65006d4576eb6129d45b3653cdac50d8c0d485eac5867d5f3c48ac85fb062af13b748b833529cd7d390b34e53a4080e279850d1e1d25b1e52366f257c7ce228c9f0861e9396ef469631c0d90bfd51e2ee08b086a17e62c78e8d420e880a5d2fcd9a7aefc8e0a7c6ba5c4681af509d39076e734e0fe"}], 0x0, &(0x7f000000b0c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {r6, r4}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x0, 0x1, 0x1, [r11, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4002000}}, {{0x0, 0x0, &(0x7f000000b280)=[{&(0x7f000000b1c0)="893b6dfbca416427d5ac98ac625b634f65db6fdda21089ed072daa644d0a357405ca5255e1f12f163c5650c80395dabd7abfc328d079df2b529579f04994a118401513a82657d2fcf188aedb2ceecaed69066a6eb84e5ffb1871aa8a2471b38f3c8cb4d30d6abbcecf4cf7674d6b5da877227654655f175f6deef565fcfed0f2c829db95176823c0cb73"}], 0x0, 0x0, 0x0, 0x20000020}}, {{&(0x7f000000b2c0)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f000000b500)=[{&(0x7f000000b340)="933e398ae649c67e425958f0535881bf7cccf55fb0ad268b4750269c22f894b5667440ee7cb04f3a74675deb8bd7a2df522b101a9fd9f93cfb532fc3ea45070448ead97c727d1ca69b5047c948e1d15638a8da5f3ff9f35fb58e135f0736828ec325287113327df2543fa2d3ccbbc33a099a60c77c2ed495ab31fd8bfa38fa96dc5ae86ed6296ade47c2f001a03dafd236baa8"}, {&(0x7f000000b400)="4406123e5c6eae937133bf7a57b236886e9f645933f2be50f20ad6f7ab893f8243dca3a478c87cd3dcca0987f547a07b4b32e9b01017cda1c1c288bc587dbd9408eda4c5315fef3bb1aa813fe42d006394a21655fe9abd8ab7152af0cd8e48110b4f0d4505171eb5bde5bd8c6c1e6739a56206acb762f58c00b523ab722096b9ce3cbbfd3230a5219593d02d5a68f8b75eb8ba1bdbf5166b47ea7cf84530b2a37b9f4f44d784064f1cc061a11b6d8d4f195dce49075a45d17c8677"}, {&(0x7f000000b4c0)="e0d7fa8794f2"}], 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f000000b540)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f000000c700)=[{&(0x7f000000b5c0)="7a54752458243ba546c9a952e255950575dede3d31405f897573f6de180ce88be55a056e7bf892d62cf770aab68b9d5590d9e25ff32626b73af30ef0652185b0c112a90c60247557e5259fa2835907ed8fe71f4c8047885269db09756ed5007d148116843e910247e4dd181250c0ee577b0fc7b0cc96aa3f1b8e4623718879ce18a3a9b6bf7c566cba7c3fc4051cbc58357b12ba7bfd537619cd2f8f47b1ded2f7763216daba221dc45b4cac8bf8de7d3f31f1b30f639248058f848835295939eb80889350324418d737bb2a7edf1d877666"}, {&(0x7f000000b6c0)="b2ce6317419a71ee8b49e0030016e20ce41d2637650fc4b1d8b4"}, {&(0x7f000000b700)="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"}], 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f000000d780)=[{&(0x7f000000c740)="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"}, {&(0x7f000000d740)="364bdbd3ddf1b61df8667e25b5ae88c4f693a63e8550fee7"}], 0x0, &(0x7f000000d880)=[@cred], 0x0, 0x84}}], 0x400000000000135, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1526.640830][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.652630][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500087a000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800060400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.733832][T18937] loop3: p2 < > p3 p4 [ 1526.738127][T18937] loop3: p2 size 2 extends beyond EOD, truncated [ 1526.745149][T18937] loop3: p3 start 225 is beyond EOD, truncated [ 1526.751604][T18937] loop3: p4 size 3657466010 extends beyond EOD, truncated 18:21:32 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050b0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000c18000da55aa", 0x40, 0x1c0}]) [ 1526.824544][T19047] loop1: p2 < > p3 p4 [ 1526.833863][T19047] loop1: partition table partially beyond EOD, truncated [ 1526.841025][T19047] loop1: p2 start 655360 is beyond EOD, truncated [ 1526.847494][T19047] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1526.853966][T19055] loop2: p2 < > p3 p4 [ 1526.855481][T19047] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1526.859193][T19055] loop2: p2 size 2 extends beyond EOD, truncated 18:21:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500087a000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1526.872690][T19055] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1526.881066][T19058] loop3: p2 < > p3 p4 [ 1526.881690][ T155] loop1: p2 < > p3 p4 [ 1526.885381][T19058] loop3: p2 size 2 extends beyond EOD, truncated [ 1526.889491][ T155] loop1: partition table partially beyond EOD, truncated [ 1526.898972][T19055] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1526.903079][ T155] loop1: p2 start 655360 is beyond EOD, truncated [ 1526.916288][ T155] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1526.924217][T19058] loop3: p3 start 225 is beyond EOD, truncated [ 1526.930513][T19058] loop3: p4 size 3657466049 extends beyond EOD, truncated [ 1526.934681][T19161] loop4: p2 < > p3 p4 [ 1526.938042][ T155] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1526.941816][T19161] loop4: partition table partially beyond EOD, truncated [ 1526.956019][T19161] loop4: p2 start 1030 is beyond EOD, truncated [ 1526.962408][T19161] loop4: p3 start 225 is beyond EOD, truncated [ 1526.968731][T19161] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:32 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00ffffffc98000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff000000009a8000da55aa", 0x40, 0x1c0}]) 18:21:32 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050c0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1527.354507][T19269] loop3: p2 < > p3 p4 [ 1527.358698][T19269] loop3: p2 size 2 extends beyond EOD, truncated [ 1527.365643][T19269] loop3: p3 start 225 is beyond EOD, truncated [ 1527.371808][T19269] loop3: p4 start 4294967040 is beyond EOD, truncated [ 1527.409076][T19270] loop5: p2 < > p3 p4 [ 1527.413360][T19270] loop5: p2 size 2 extends beyond EOD, truncated [ 1527.420252][T19270] loop5: p3 start 225 is beyond EOD, truncated [ 1527.426644][T19270] loop5: p4 size 3657466010 extends beyond EOD, truncated 18:21:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffff0f000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000f000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000003de8000da55aa", 0x40, 0x1c0}]) [ 1527.544048][T19274] loop2: p2 < > p3 p4 [ 1527.548322][T19274] loop2: p2 size 2 extends beyond EOD, truncated [ 1527.555475][T19274] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1527.563054][T19274] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1527.571953][ T155] loop2: p2 < > p3 p4 [ 1527.576161][ T155] loop2: p2 size 2 extends beyond EOD, truncated 18:21:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000500000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1527.587899][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1527.598970][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:33 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050d0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1527.646361][T19280] loop3: p2 < > p3 p4 [ 1527.656768][T19280] loop3: p2 size 2 extends beyond EOD, truncated [ 1527.669485][T19280] loop3: p3 start 225 is beyond EOD, truncated [ 1527.675818][T19280] loop3: p4 start 50331648 is beyond EOD, truncated 18:21:33 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000003e08000da55aa", 0x40, 0x1c0}]) [ 1527.754539][T19288] loop0: p2 < > p3 p4 [ 1527.759549][T19288] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1527.767542][T19288] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1527.794179][T19291] loop5: p2 < > p3 p4 [ 1527.798339][T19291] loop5: p2 size 2 extends beyond EOD, truncated [ 1527.805258][T19291] loop5: p3 start 225 is beyond EOD, truncated [ 1527.811435][T19291] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1527.843807][T19292] loop1: p2 < > p3 p4 [ 1527.848102][T19292] loop1: partition table partially beyond EOD, truncated [ 1527.855267][T19292] loop1: p2 start 1048575 is beyond EOD, truncated [ 1527.862016][T19292] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1527.869828][T19292] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:33 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1527.953963][T19298] loop4: p2 < > p3 p4 [ 1527.958136][T19298] loop4: partition table partially beyond EOD, truncated [ 1527.965453][T19298] loop4: p2 start 1280 is beyond EOD, truncated [ 1527.971731][T19298] loop4: p3 start 225 is beyond EOD, truncated [ 1527.977938][T19298] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1528.044388][T19295] loop2: p2 < > p3 p4 [ 1528.044911][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1528.052735][T19295] loop2: p2 size 2 extends beyond EOD, truncated [ 1528.065321][T19295] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1528.072908][T19295] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1528.081987][ T155] loop2: p2 < > p3 p4 [ 1528.086569][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1528.089022][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1528.102940][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1528.110526][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1528.174368][T19304] loop5: p2 < > p3 p4 [ 1528.178100][T19302] loop3: p2 < > p3 p4 [ 1528.178624][T19304] loop5: p2 size 2 extends beyond EOD, truncated [ 1528.182735][T19302] loop3: p2 size 2 extends beyond EOD, truncated [ 1528.189508][T19304] loop5: p3 start 225 is beyond EOD, truncated [ 1528.196106][T19302] loop3: p3 start 225 is beyond EOD, truncated [ 1528.201531][T19304] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1528.207744][T19302] loop3: p4 start 50331648 is beyond EOD, truncated [ 1528.274460][ T155] loop3: p2 < > p3 p4 [ 1528.278662][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1528.285533][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1528.291727][ T155] loop3: p4 start 50331648 is beyond EOD, truncated 18:21:33 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000e18000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050e0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000090000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000014000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1528.447147][T19309] loop2: p2 < > p3 p4 [ 1528.452549][T19309] loop2: p2 size 2 extends beyond EOD, truncated [ 1528.459547][T19309] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1528.467230][T19309] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1528.484194][T19312] loop3: p2 < > p3 p4 [ 1528.488389][T19312] loop3: p2 size 2 extends beyond EOD, truncated 18:21:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000600000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1528.495820][ T155] loop2: p2 < > p3 p4 [ 1528.499995][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1528.512082][T19312] loop3: p3 start 225 is beyond EOD, truncated [ 1528.518872][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1528.523202][T19312] loop3: p4 size 3657466081 extends beyond EOD, truncated [ 1528.526594][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1528.540909][T19317] loop5: p2 < > p3 p4 [ 1528.545255][T19317] loop5: p2 size 2 extends beyond EOD, truncated [ 1528.552486][T19317] loop5: p3 start 225 is beyond EOD, truncated [ 1528.558777][T19317] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:34 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00fffffffd8000da55aa", 0x40, 0x1c0}]) [ 1528.703809][T19325] loop1: p2 < > p3 p4 [ 1528.707932][T19325] loop1: partition table partially beyond EOD, truncated [ 1528.715337][T19325] loop1: p2 start 9437184 is beyond EOD, truncated [ 1528.721847][T19325] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1528.729626][T19325] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:34 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:34 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050f0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1528.778247][T19326] loop0: p2 p3 p4 [ 1528.782495][T19326] loop0: p2 size 1073872896 extends beyond EOD, truncated [ 1528.794539][T19326] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1528.809579][T19326] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1528.886552][T19329] loop4: p2 < > p3 p4 [ 1528.890645][T19329] loop4: partition table partially beyond EOD, truncated [ 1528.898126][T19329] loop4: p2 start 1536 is beyond EOD, truncated [ 1528.905037][T19329] loop4: p3 start 225 is beyond EOD, truncated [ 1528.911257][T19329] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1529.004278][T19334] loop3: p2 < > p3 p4 [ 1529.008495][T19334] loop3: p2 size 2 extends beyond EOD, truncated [ 1529.015457][T19334] loop3: p3 start 225 is beyond EOD, truncated [ 1529.021631][T19334] loop3: p4 start 4294967040 is beyond EOD, truncated 18:21:34 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000fff8000da55aa", 0x40, 0x1c0}]) [ 1529.184443][T19336] loop5: p2 < > p3 p4 [ 1529.188752][T19336] loop5: p2 size 2 extends beyond EOD, truncated [ 1529.190817][T19339] loop2: p2 < > p3 p4 [ 1529.195982][T19336] loop5: p3 start 225 is beyond EOD, truncated [ 1529.202169][T19339] loop2: p2 size 2 extends beyond EOD, truncated [ 1529.205679][T19336] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1529.212715][T19339] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1529.227568][T19339] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:34 executing program 5: pipe(0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000010000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5412, &(0x7f00000000c0)={0x2, {0x3}}) [ 1529.256947][ T155] loop2: p2 < > p3 p4 [ 1529.261203][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1529.270184][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1529.279371][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800040600000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1529.324539][T19344] loop3: p2 < > p3 p4 [ 1529.328736][T19344] loop3: p2 size 2 extends beyond EOD, truncated [ 1529.343874][T19344] loop3: p3 start 225 is beyond EOD, truncated [ 1529.350189][T19344] loop3: p4 start 251658240 is beyond EOD, truncated 18:21:34 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005100800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:34 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00ffffefff8000da55aa", 0x40, 0x1c0}]) [ 1529.423800][T19347] loop5: p2 < > p3 p4 [ 1529.427964][T19347] loop5: p2 size 2 extends beyond EOD, truncated [ 1529.444492][T19347] loop5: p3 start 225 is beyond EOD, truncated [ 1529.462835][T19347] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:35 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1529.524093][T19355] loop1: p2 < > p3 p4 [ 1529.528340][T19355] loop1: partition table partially beyond EOD, truncated [ 1529.536157][T19355] loop1: p2 start 16777216 is beyond EOD, truncated [ 1529.542918][T19355] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1529.551615][T19355] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1529.688105][T19362] loop2: p2 < > p3 p4 [ 1529.692683][T19362] loop2: p2 size 2 extends beyond EOD, truncated [ 1529.707334][T19362] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1529.715761][T19362] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1529.754087][T19366] loop3: p2 < > p3 p4 [ 1529.758539][T19366] loop3: p2 size 2 extends beyond EOD, truncated [ 1529.766306][T19366] loop3: p3 start 225 is beyond EOD, truncated [ 1529.772659][T19366] loop3: p4 start 4026531584 is beyond EOD, truncated [ 1529.813954][T19367] loop4: p2 < > p3 p4 [ 1529.818247][T19367] loop4: partition table partially beyond EOD, truncated [ 1529.827427][ T155] loop2: p2 < > p3 p4 [ 1529.831832][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1529.838829][T19367] loop4: p2 start 1540 is beyond EOD, truncated [ 1529.846147][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1529.853676][T19367] loop4: p3 start 225 is beyond EOD, truncated [ 1529.860659][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1529.868936][T19370] loop5: p2 < > p3 p4 [ 1529.873368][T19370] loop5: p2 size 2 extends beyond EOD, truncated [ 1529.879909][T19367] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1529.888866][T19370] loop5: p3 start 225 is beyond EOD, truncated [ 1529.896795][T19370] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:35 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) 18:21:35 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000fffff8000da55aa", 0x40, 0x1c0}]) 18:21:35 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005110800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1530.057754][ T392] udevd[392]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1530.068657][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1530.085965][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1530.098340][ T349] udevd[349]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory 18:21:35 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) 18:21:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000020000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540e, &(0x7f00000000c0)={0x2, {0x3}}) [ 1530.204372][ T349] udevd[349]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1530.244016][T19378] loop2: p2 < > p3 p4 [ 1530.244315][ T1048] udevd[1048]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1530.248343][T19378] loop2: p2 size 2 extends beyond EOD, truncated [ 1530.265748][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1530.276378][T19378] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1530.284486][T19378] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000700000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1530.320392][T19379] loop3: p2 < > p3 p4 [ 1530.324856][T19379] loop3: p2 size 2 extends beyond EOD, truncated [ 1530.336998][T19379] loop3: p3 start 225 is beyond EOD, truncated [ 1530.343328][T19379] loop3: p4 start 4279173120 is beyond EOD, truncated 18:21:35 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005120800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:35 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00ffefffff8000da55aa", 0x40, 0x1c0}]) [ 1530.393902][T19390] loop1: p2 < > p3 p4 [ 1530.400727][T19390] loop1: partition table partially beyond EOD, truncated [ 1530.408311][T19390] loop1: p2 start 33554432 is beyond EOD, truncated [ 1530.415320][T19390] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1530.428280][T19390] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:36 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) [ 1530.704028][T19402] loop3: p2 < > p3 p4 [ 1530.708366][T19402] loop3: p2 size 2 extends beyond EOD, truncated [ 1530.715731][T19402] loop3: p3 start 225 is beyond EOD, truncated [ 1530.722113][T19402] loop3: p4 start 4293918464 is beyond EOD, truncated [ 1530.743932][T19403] loop2: p2 < > p3 p4 [ 1530.748317][T19403] loop2: p2 size 2 extends beyond EOD, truncated [ 1530.755737][T19403] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1530.763867][T19403] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:36 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff007fffffff8000da55aa", 0x40, 0x1c0}]) 18:21:36 executing program 5: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) [ 1530.844984][T19399] loop4: p2 < > p3 p4 [ 1530.849254][T19399] loop4: partition table partially beyond EOD, truncated [ 1530.856526][T19399] loop4: p2 start 1792 is beyond EOD, truncated [ 1530.862872][T19399] loop4: p3 start 225 is beyond EOD, truncated [ 1530.869219][T19399] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1530.924587][T19403] loop2: p2 < > p3 p4 [ 1530.928774][T19403] loop2: p2 size 2 extends beyond EOD, truncated [ 1530.935697][T19403] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1530.943458][T19403] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000004020000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:36 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005250800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1531.067908][ T155] loop2: p2 < > p3 p4 [ 1531.072981][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1531.080792][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1531.088413][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1531.124489][T19415] loop3: p2 < > p3 p4 [ 1531.128707][T19415] loop3: p2 size 2 extends beyond EOD, truncated [ 1531.135631][T19415] loop3: p3 start 225 is beyond EOD, truncated [ 1531.141841][T19415] loop3: p4 start 4294934272 is beyond EOD, truncated 18:21:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200305700a6", 0x33, 0x1c0}]) 18:21:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000900000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:36 executing program 5: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 18:21:36 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0080ffffff8000da55aa", 0x40, 0x1c0}]) [ 1531.284863][T19421] loop1: p2 < > p3 p4 [ 1531.288955][T19421] loop1: partition table partially beyond EOD, truncated [ 1531.296240][T19421] loop1: p2 start 33816576 is beyond EOD, truncated [ 1531.302805][T19421] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1531.310718][T19421] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1531.314120][T19423] loop2: p2 < > p3 p4 [ 1531.321964][T19423] loop2: p2 size 2 extends beyond EOD, truncated [ 1531.328750][T19423] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1531.336303][T19423] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:37 executing program 5: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) [ 1531.654577][T19438] loop4: p2 < > p3 p4 [ 1531.658694][T19438] loop4: partition table partially beyond EOD, truncated [ 1531.665878][T19438] loop4: p2 start 2304 is beyond EOD, truncated [ 1531.672145][T19438] loop4: p3 start 225 is beyond EOD, truncated [ 1531.678346][T19438] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000002505000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1531.746497][T19436] loop3: p2 < > p3 p4 [ 1531.752293][T19436] loop3: p2 size 2 extends beyond EOD, truncated [ 1531.759135][ T155] loop4: p2 < > p3 p4 [ 1531.760634][T19436] loop3: p3 start 225 is beyond EOD, truncated [ 1531.763551][ T155] loop4: partition table partially beyond EOD, truncated [ 1531.769398][T19436] loop3: p4 start 4294934528 is beyond EOD, truncated [ 1531.776883][ T155] loop4: p2 start 2304 is beyond EOD, truncated [ 1531.789378][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1531.796285][T19423] loop2: p2 < > p3 p4 [ 1531.800426][T19423] loop2: p2 size 2 extends beyond EOD, truncated [ 1531.806921][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1531.813942][T19423] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1531.821523][T19423] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000030000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:37 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005480800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:37 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0097ffffff8000da55aa", 0x40, 0x1c0}]) 18:21:37 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 18:21:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1532.064353][T19448] loop0: p2 < > p3 p4 [ 1532.068955][T19448] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1532.076686][T19448] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1532.093895][T19453] loop3: p2 < > p3 p4 [ 1532.098375][T19453] loop3: p2 size 2 extends beyond EOD, truncated [ 1532.105395][T19453] loop3: p3 start 225 is beyond EOD, truncated [ 1532.111613][T19453] loop3: p4 start 4294940416 is beyond EOD, truncated [ 1532.184506][T19457] loop2: p2 < > p3 p4 [ 1532.188797][T19457] loop2: p2 size 2 extends beyond EOD, truncated [ 1532.195835][T19457] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1532.203630][T19457] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:37 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00c9ffffff8000da55aa", 0x40, 0x1c0}]) [ 1532.365147][ T2286] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1532.377833][T19453] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1532.378571][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1532.394595][ T119] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1532.405456][ T119] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1532.454601][T19460] loop1: p2 < > p3 p4 [ 1532.458706][T19460] loop1: partition table partially beyond EOD, truncated [ 1532.465860][T19460] loop1: p2 start 50331648 is beyond EOD, truncated [ 1532.472451][T19460] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1532.480138][T19460] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:38 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 18:21:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b67, &(0x7f00000000c0)={0x2, {0x3}}) [ 1532.654819][T19467] loop4: p2 < > p3 p4 [ 1532.661114][T19467] loop4: partition table partially beyond EOD, truncated [ 1532.668622][T19467] loop4: p2 start 2560 is beyond EOD, truncated [ 1532.675828][T19467] loop4: p3 start 225 is beyond EOD, truncated [ 1532.682014][T19467] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1532.704203][T19457] loop2: p2 < > p3 p4 [ 1532.708345][T19457] loop2: p2 size 2 extends beyond EOD, truncated [ 1532.715365][T19457] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1532.722905][T19457] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:38 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000054c0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1532.748514][ T155] loop3: p2 < > p3 p4 [ 1532.752681][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1532.759501][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1532.765678][ T155] loop3: p4 start 4294953216 is beyond EOD, truncated [ 1532.773111][T19471] loop3: p2 < > p3 p4 [ 1532.777453][T19471] loop3: p2 size 2 extends beyond EOD, truncated [ 1532.784206][T19471] loop3: p3 start 225 is beyond EOD, truncated [ 1532.790364][T19471] loop3: p4 start 4294953216 is beyond EOD, truncated 18:21:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000040000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000b00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:38 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 18:21:38 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00fdffffff8000da55aa", 0x40, 0x1c0}]) [ 1533.093410][ T392] udevd[392]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1533.154760][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1533.165991][T19482] loop2: p2 < > p3 p4 [ 1533.170312][T19482] loop2: p2 size 2 extends beyond EOD, truncated [ 1533.177305][T19482] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1533.184998][T19482] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1533.193901][ T155] loop2: p2 < > p3 p4 [ 1533.198050][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1533.204811][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1533.212213][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1533.220334][T19490] loop3: p2 < > p3 p4 [ 1533.224759][T19490] loop3: p2 size 2 extends beyond EOD, truncated [ 1533.232385][T19490] loop3: p3 start 225 is beyond EOD, truncated [ 1533.238619][T19490] loop3: p4 start 4294966528 is beyond EOD, truncated [ 1533.324042][T19494] loop1: p2 < > p3 p4 [ 1533.328225][T19494] loop1: partition table partially beyond EOD, truncated [ 1533.335599][T19494] loop1: p2 start 67108864 is beyond EOD, truncated [ 1533.342272][T19494] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1533.349952][T19494] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:38 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0), 0x0, 0x1c0}]) 18:21:38 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000040000da55aa", 0x40, 0x1c0}]) 18:21:39 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005540800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1533.492098][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1533.499757][T19497] loop4: p2 < > p3 p4 [ 1533.506239][T19497] loop4: partition table partially beyond EOD, truncated [ 1533.513418][T19497] loop4: p2 start 2816 is beyond EOD, truncated [ 1533.519676][T19497] loop4: p3 start 225 is beyond EOD, truncated [ 1533.525868][T19497] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000905000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:39 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0), 0x0, 0x1c0}]) [ 1533.685131][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1533.716415][ T155] loop3: p2 < > p3 p4 [ 1533.716440][T19507] loop2: p2 < > p3 p4 [ 1533.720699][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1533.724723][T19507] loop2: p2 size 2 extends beyond EOD, truncated [ 1533.733400][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1533.739825][T19507] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1533.743370][ T155] loop3: p4 size 3657433092 extends beyond EOD, truncated [ 1533.758178][T19507] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1533.758853][T19504] loop3: p2 < > p3 p4 [ 1533.770445][T19504] loop3: p2 size 2 extends beyond EOD, truncated [ 1533.777211][T19504] loop3: p3 start 225 is beyond EOD, truncated [ 1533.783374][T19504] loop3: p4 size 3657433092 extends beyond EOD, truncated 18:21:39 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0), 0x0, 0x1c0}]) 18:21:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000050000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:39 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000005400da55aa", 0x40, 0x1c0}]) 18:21:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1534.015781][T19516] loop0: p2 < > p3 p4 [ 1534.020566][T19516] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1534.028144][T19516] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1534.034491][T19507] loop2: p2 < > p3 p4 [ 1534.039381][T19507] loop2: p2 size 2 extends beyond EOD, truncated [ 1534.046513][T19507] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1534.054061][T19507] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:39 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005550800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1534.323877][T19529] loop3: p2 < > p3 p4 [ 1534.328040][T19529] loop3: p2 size 2 extends beyond EOD, truncated [ 1534.334904][T19529] loop3: p3 start 225 is beyond EOD, truncated [ 1534.341056][T19529] loop3: p4 size 3657454592 extends beyond EOD, truncated 18:21:39 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ff", 0x20, 0x1c0}]) [ 1534.375341][T19527] loop1: p2 < > p3 p4 [ 1534.379473][T19527] loop1: partition table partially beyond EOD, truncated [ 1534.387807][T19527] loop1: p2 start 83886080 is beyond EOD, truncated [ 1534.394580][T19527] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1534.402109][T19527] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1534.409972][T19531] loop4: p2 < > p3 p4 [ 1534.414102][T19531] loop4: partition table partially beyond EOD, truncated [ 1534.421203][T19531] loop4: p2 start 3072 is beyond EOD, truncated [ 1534.427481][T19531] loop4: p3 start 225 is beyond EOD, truncated [ 1534.433672][T19531] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:39 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000200008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 0: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac020000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ff", 0x20, 0x1c0}]) [ 1534.623049][ T155] loop2: p2 < > p3 p4 [ 1534.627254][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1534.634085][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1534.641582][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1534.650757][T19537] loop2: p2 < > p3 p4 [ 1534.655697][T19537] loop2: p2 size 2 extends beyond EOD, truncated [ 1534.662632][T19537] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1534.671638][T19537] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1534.671733][T19545] loop0: p2 < > p3 p4 [ 1534.682921][T19545] loop0: p2 size 2 extends beyond EOD, truncated [ 1534.689628][T19545] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1534.697173][T19545] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1534.723862][T19543] loop3: p2 < > p3 p4 [ 1534.728074][T19543] loop3: p2 size 2 extends beyond EOD, truncated [ 1534.735593][ T155] loop0: p2 < > p3 p4 [ 1534.737134][T19543] loop3: p3 start 225 is beyond EOD, truncated [ 1534.739771][ T155] loop0: p2 size 2 extends beyond EOD, truncated [ 1534.746060][T19543] loop3: p4 start 131072 is beyond EOD, truncated [ 1534.753197][ T155] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1534.767042][ T155] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:21:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000060000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b60, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:40 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000300008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005600800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000d00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:40 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ff", 0x20, 0x1c0}]) [ 1534.974066][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1534.995282][T19561] loop3: p2 < > p3 p4 [ 1534.999472][T19561] loop3: p2 size 2 extends beyond EOD, truncated [ 1535.006375][T19561] loop3: p3 start 225 is beyond EOD, truncated [ 1535.012507][T19561] loop3: p4 start 196608 is beyond EOD, truncated [ 1535.019911][T19555] loop2: p2 < > p3 p4 [ 1535.024151][T19555] loop2: p2 size 2 extends beyond EOD, truncated [ 1535.034634][T19555] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1535.043301][T19555] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1535.054830][ T155] loop3: p2 < > p3 p4 [ 1535.059084][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1535.066161][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1535.072389][ T155] loop3: p4 start 196608 is beyond EOD, truncated [ 1535.083555][T19568] loop1: p2 < > p3 p4 [ 1535.087642][T19568] loop1: partition table partially beyond EOD, truncated [ 1535.103349][T19568] loop1: p2 start 100663296 is beyond EOD, truncated [ 1535.110140][T19568] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1535.118159][T19568] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:40 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e1000000887700720030", 0x30, 0x1c0}]) 18:21:40 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000400008000da55aa", 0x40, 0x1c0}]) [ 1535.300555][T19572] loop4: p2 < > p3 p4 [ 1535.312566][T19572] loop4: partition table partially beyond EOD, truncated [ 1535.320007][T19572] loop4: p2 start 3328 is beyond EOD, truncated [ 1535.326399][T19572] loop4: p3 start 225 is beyond EOD, truncated [ 1535.332561][T19572] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1535.340408][T19555] loop2: p2 < > p3 p4 [ 1535.344582][T19555] loop2: p2 size 2 extends beyond EOD, truncated [ 1535.351295][T19555] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1535.358890][T19555] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1535.366966][ T96] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1535.377835][ T96] Buffer I/O error on dev loop4, logical block 0, async page read [ 1535.385789][ T119] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1535.396657][ T119] Buffer I/O error on dev loop4, logical block 0, async page read [ 1535.404633][ T155] loop4: unable to read partition table [ 1535.413724][T19578] loop3: p2 < > p3 p4 [ 1535.417852][T19578] loop3: p2 size 2 extends beyond EOD, truncated [ 1535.424726][T19578] loop3: p3 start 225 is beyond EOD, truncated [ 1535.430857][T19578] loop3: p4 start 262144 is beyond EOD, truncated 18:21:41 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005630800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:41 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e1000000887700720030", 0x30, 0x1c0}]) 18:21:41 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000500008000da55aa", 0x40, 0x1c0}]) [ 1535.674332][ T392] udevd[392]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1535.685267][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1535.714038][T19585] loop2: p2 < > p3 p4 [ 1535.718337][T19585] loop2: p2 size 2 extends beyond EOD, truncated 18:21:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000004060000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:41 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e1000000887700720030", 0x30, 0x1c0}]) [ 1535.728353][T19585] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1535.737637][T19585] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1535.758432][ T349] udevd[349]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory 18:21:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4d, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000e00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1535.824691][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory 18:21:41 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff0000", 0x38, 0x1c0}]) [ 1535.892967][T19589] loop3: p2 < > p3 p4 [ 1535.897389][T19589] loop3: p2 size 2 extends beyond EOD, truncated [ 1535.906185][T19589] loop3: p3 start 225 is beyond EOD, truncated [ 1535.912368][T19589] loop3: p4 start 327680 is beyond EOD, truncated [ 1536.078147][T19585] loop2: p2 < > p3 p4 [ 1536.082905][T19585] loop2: p2 size 2 extends beyond EOD, truncated [ 1536.096144][T19585] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1536.111531][T19585] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1536.113851][T19597] loop1: p2 < > p3 p4 [ 1536.127261][T19597] loop1: partition table partially beyond EOD, truncated [ 1536.147657][T19597] loop1: p2 start 100925440 is beyond EOD, truncated [ 1536.155322][T19597] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1536.163069][T19597] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1536.173009][T19607] loop4: p2 < > p3 p4 18:21:41 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000600008000da55aa", 0x40, 0x1c0}]) 18:21:41 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005680800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1536.177153][T19607] loop4: partition table partially beyond EOD, truncated [ 1536.186587][T19607] loop4: p2 start 3584 is beyond EOD, truncated [ 1536.192898][T19607] loop4: p3 start 225 is beyond EOD, truncated [ 1536.199399][T19607] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:42 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff0000", 0x38, 0x1c0}]) 18:21:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000070000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1536.589362][ T155] loop3: p2 < > p3 p4 [ 1536.597849][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1536.604734][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1536.610883][ T155] loop3: p4 start 393216 is beyond EOD, truncated [ 1536.618402][T19613] loop3: p2 < > p3 p4 [ 1536.622650][T19613] loop3: p2 size 2 extends beyond EOD, truncated [ 1536.630523][T19613] loop3: p3 start 225 is beyond EOD, truncated [ 1536.637066][T19613] loop3: p4 start 393216 is beyond EOD, truncated 18:21:42 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000700008000da55aa", 0x40, 0x1c0}]) [ 1536.666566][T19616] loop2: p2 < > p3 p4 [ 1536.670846][T19616] loop2: p2 size 2 extends beyond EOD, truncated [ 1536.677734][T19616] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1536.685326][T19616] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800001100000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b46, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:42 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff0000", 0x38, 0x1c0}]) [ 1536.873775][T19616] loop2: p2 < > p3 p4 [ 1536.878049][T19616] loop2: p2 size 2 extends beyond EOD, truncated [ 1536.888390][T19616] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1536.897529][T19616] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1536.906774][T19625] loop1: p2 < > p3 p4 [ 1536.910934][T19625] loop1: partition table partially beyond EOD, truncated [ 1536.919225][T19625] loop1: p2 start 117440512 is beyond EOD, truncated [ 1536.926044][T19625] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1536.934448][T19625] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:42 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000056c0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:42 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff000000000080", 0x3c, 0x1c0}]) [ 1536.992108][T19628] loop3: p2 < > p3 p4 [ 1536.997720][T19628] loop3: p2 size 2 extends beyond EOD, truncated [ 1537.013900][T19628] loop3: p3 start 225 is beyond EOD, truncated [ 1537.020052][T19628] loop3: p4 start 458752 is beyond EOD, truncated 18:21:42 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000800008000da55aa", 0x40, 0x1c0}]) [ 1537.237033][T19641] loop4: p2 < > p3 p4 [ 1537.242089][T19641] loop4: partition table partially beyond EOD, truncated [ 1537.256888][T19641] loop4: p2 start 4352 is beyond EOD, truncated [ 1537.263136][T19641] loop4: p3 start 225 is beyond EOD, truncated [ 1537.272345][T19643] loop2: p2 < > p3 p4 [ 1537.276650][T19643] loop2: p2 size 2 extends beyond EOD, truncated [ 1537.277040][T19641] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1537.286515][T19643] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1537.297821][T19643] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1537.366738][T26898] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1537.379512][T19641] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 1537.388481][ T119] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1537.399389][ T119] Buffer I/O error on dev loop4p4, logical block 0, async page read 18:21:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000080000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:43 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff000000000080", 0x3c, 0x1c0}]) [ 1537.516653][T19651] loop3: p2 < > p3 p4 [ 1537.520855][T19651] loop3: p2 size 2 extends beyond EOD, truncated [ 1537.535199][T19651] loop3: p3 start 225 is beyond EOD, truncated [ 1537.541400][T19651] loop3: p4 start 524288 is beyond EOD, truncated [ 1537.565470][T19643] loop2: p2 < > p3 p4 [ 1537.569612][T19643] loop2: p2 size 2 extends beyond EOD, truncated [ 1537.579524][T19643] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1537.587153][T19643] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000c105000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800001200000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:43 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff000000000080", 0x3c, 0x1c0}]) 18:21:43 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005740800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1537.736105][ T2286] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1537.740964][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1537.757372][T19651] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1537.776834][ T119] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1537.787721][ T119] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1537.874116][T19660] loop1: p2 < > p3 p4 [ 1537.878563][T19660] loop1: partition table partially beyond EOD, truncated [ 1537.885973][T19660] loop1: p2 start 134217728 is beyond EOD, truncated [ 1537.892770][T19660] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1537.900613][T19660] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:43 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000900008000da55aa", 0x40, 0x1c0}]) [ 1537.925515][T19666] loop2: p2 < > p3 p4 [ 1537.930030][T19666] loop2: p2 size 2 extends beyond EOD, truncated [ 1537.937258][T19666] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1537.944869][T19666] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1538.005652][T19671] loop4: p2 < > p3 p4 [ 1538.009764][T19671] loop4: partition table partially beyond EOD, truncated [ 1538.017051][T19671] loop4: p2 start 4608 is beyond EOD, truncated [ 1538.023324][T19671] loop4: p3 start 225 is beyond EOD, truncated [ 1538.029493][T19671] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1538.037952][ T155] loop4: p2 < > p3 p4 [ 1538.042098][ T155] loop4: partition table partially beyond EOD, truncated [ 1538.049377][ T155] loop4: p2 start 4608 is beyond EOD, truncated [ 1538.055904][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1538.062131][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1538.062237][T19674] loop0: p2 < > p3 p4 [ 1538.073934][T19674] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 1538.081461][T19674] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:21:43 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da", 0x3e, 0x1c0}]) 18:21:43 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000057a0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000090000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1538.357617][T19680] loop3: p2 < > p3 p4 [ 1538.361760][T19680] loop3: p2 size 2 extends beyond EOD, truncated [ 1538.368726][T19680] loop3: p3 start 225 is beyond EOD, truncated [ 1538.375003][T19680] loop3: p4 start 589824 is beyond EOD, truncated 18:21:44 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da", 0x3e, 0x1c0}]) 18:21:44 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000a00008000da55aa", 0x40, 0x1c0}]) [ 1538.568833][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1538.579514][ T349] udevd[349]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1538.589948][T19687] loop2: p2 < > p3 p4 [ 1538.594470][T19687] loop2: p2 size 2 extends beyond EOD, truncated [ 1538.601181][T19687] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1538.609309][T19696] loop3: p2 < > p3 p4 18:21:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800001f00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b45, &(0x7f00000000c0)={0x2, {0x3}}) [ 1538.613514][T19696] loop3: p2 size 2 extends beyond EOD, truncated [ 1538.620631][T19687] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1538.629554][T19696] loop3: p3 start 225 is beyond EOD, truncated [ 1538.637264][T19696] loop3: p4 start 655360 is beyond EOD, truncated 18:21:44 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da", 0x3e, 0x1c0}]) [ 1538.749694][T19698] loop1: p2 < > p3 p4 [ 1538.754100][T19698] loop1: partition table partially beyond EOD, truncated [ 1538.761748][T19698] loop1: p2 start 150994944 is beyond EOD, truncated [ 1538.769693][T19698] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1538.779618][T19698] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:44 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000b00008000da55aa", 0x40, 0x1c0}]) 18:21:44 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000059a0800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1538.945966][T19707] loop4: p2 < > p3 p4 [ 1538.952596][T19707] loop4: partition table partially beyond EOD, truncated [ 1538.983448][T19707] loop4: p2 start 7936 is beyond EOD, truncated [ 1538.986275][T19713] loop3: p2 < > p3 p4 [ 1538.994262][T19707] loop4: p3 start 225 is beyond EOD, truncated [ 1538.994798][T19713] loop3: p2 size 2 extends beyond EOD, truncated [ 1539.003744][T19707] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1539.007680][T19713] loop3: p3 start 225 is beyond EOD, truncated [ 1539.020499][T19713] loop3: p4 start 720896 is beyond EOD, truncated [ 1539.077232][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1539.188744][T19716] loop2: p2 < > p3 p4 [ 1539.192950][T19716] loop2: p2 size 2 extends beyond EOD, truncated [ 1539.199798][T19716] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1539.207316][T19716] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:44 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 18:21:44 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000c00008000da55aa", 0x40, 0x1c0}]) [ 1539.247625][ T155] loop3: p2 < > p3 p4 [ 1539.252586][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1539.259663][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1539.265926][ T155] loop3: p4 start 720896 is beyond EOD, truncated 18:21:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000000a0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1539.314379][T19716] loop2: p2 < > p3 p4 [ 1539.318626][T19716] loop2: p2 size 2 extends beyond EOD, truncated [ 1539.325739][T19716] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1539.333469][T19716] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1539.484799][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1539.495422][ T1995] udevd[1995]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1539.505947][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1539.506790][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory 18:21:45 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005c10800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800002000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1539.526258][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1539.544761][T19723] loop3: p2 < > p3 p4 [ 1539.549359][T19723] loop3: p2 size 2 extends beyond EOD, truncated [ 1539.554406][T19729] loop1: p2 < > p3 p4 [ 1539.559737][T19729] loop1: partition table partially beyond EOD, truncated [ 1539.577170][T19723] loop3: p3 start 225 is beyond EOD, truncated 18:21:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3b, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55", 0x3f, 0x1c0}]) [ 1539.583536][T19729] loop1: p2 start 167772160 is beyond EOD, truncated [ 1539.586266][T19723] loop3: p4 start 786432 is beyond EOD, truncated [ 1539.590550][T19729] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1539.604647][T19729] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:45 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000d00008000da55aa", 0x40, 0x1c0}]) [ 1539.740632][T19732] loop2: p2 < > p3 p4 [ 1539.749781][T19732] loop2: p2 size 2 extends beyond EOD, truncated [ 1539.756811][T19732] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1539.764418][T19732] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1539.784844][T19737] loop4: p2 < > p3 p4 [ 1539.789368][T19737] loop4: partition table partially beyond EOD, truncated [ 1539.797796][T19737] loop4: p2 start 8192 is beyond EOD, truncated [ 1539.804965][T19737] loop4: p3 start 225 is beyond EOD, truncated [ 1539.811191][T19737] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1539.896708][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory 18:21:45 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000900000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55", 0x3f, 0x1c0}]) 18:21:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40}]) [ 1540.020996][T19746] loop3: p2 < > p3 p4 [ 1540.025274][T19746] loop3: p2 size 2 extends beyond EOD, truncated [ 1540.041730][T19746] loop3: p3 start 225 is beyond EOD, truncated [ 1540.073194][T19746] loop3: p4 start 851968 is beyond EOD, truncated 18:21:45 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000e00008000da55aa", 0x40, 0x1c0}]) 18:21:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000000b0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1540.209628][T19754] loop2: p2 < > p3 p4 [ 1540.214608][T19754] loop2: p2 size 2 extends beyond EOD, truncated [ 1540.221330][T19754] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1540.228824][T19754] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40}]) 18:21:45 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000a00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800002500000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1540.409028][T19763] loop3: p2 < > p3 p4 [ 1540.415240][T19763] loop3: p2 size 2 extends beyond EOD, truncated [ 1540.422068][T19763] loop3: p3 start 225 is beyond EOD, truncated [ 1540.428318][T19763] loop3: p4 start 917504 is beyond EOD, truncated [ 1540.440465][T19764] loop1: p2 < > p3 p4 [ 1540.447528][T19764] loop1: partition table partially beyond EOD, truncated [ 1540.467321][T19764] loop1: p2 start 184549376 is beyond EOD, truncated [ 1540.476723][T19764] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1540.484350][T19764] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000060405000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:46 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40}]) 18:21:46 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00001000008000da55aa", 0x40, 0x1c0}]) [ 1540.683634][ T155] loop2: p2 < > p3 p4 [ 1540.688752][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1540.697506][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1540.705292][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1540.713842][T19771] loop2: p2 < > p3 p4 [ 1540.718028][T19771] loop2: p2 size 2 extends beyond EOD, truncated [ 1540.725022][T19776] loop4: p2 < > p3 p4 [ 1540.726182][T19771] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1540.729250][T19776] loop4: partition table partially beyond EOD, truncated [ 1540.737391][T19771] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1540.747381][T19776] loop4: p2 start 9472 is beyond EOD, truncated [ 1540.756593][T19776] loop4: p3 start 225 is beyond EOD, truncated [ 1540.762714][T19776] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1540.975870][T19786] loop3: p2 < > p3 p4 [ 1540.977431][ T349] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1540.980186][T19786] loop3: p2 size 2 extends beyond EOD, truncated [ 1540.991231][T19776] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 1540.998546][T19786] loop3: p3 start 225 is beyond EOD, truncated [ 1541.007075][ T119] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 18:21:46 executing program 5: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000068024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000000c0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1541.022119][ T119] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 1541.025436][T19786] loop3: p4 start 1048576 is beyond EOD, truncated [ 1541.055355][T19788] loop0: p2 < > p3 p4 [ 1541.059752][T19788] loop0: p2 size 2 extends beyond EOD, truncated [ 1541.067047][T19788] loop0: p3 start 225 is beyond EOD, truncated [ 1541.073258][T19788] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1541.083909][T19771] loop2: p2 < > p3 p4 [ 1541.088130][T19771] loop2: p2 size 2 extends beyond EOD, truncated [ 1541.096213][T19771] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1541.099168][ T155] loop3: p2 < > p3 p4 [ 1541.104123][T19771] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1541.107488][ T155] loop3: p2 size 2 extends beyond EOD, truncated [ 1541.119540][T19792] loop5: p2 < > p3 p4 18:21:46 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000b00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1541.123815][ T155] loop3: p3 start 225 is beyond EOD, truncated [ 1541.125210][T19792] loop5: p2 size 2 extends beyond EOD, truncated [ 1541.131085][ T155] loop3: p4 start 1048576 is beyond EOD, truncated [ 1541.144238][T19792] loop5: p3 start 225 is beyond EOD, truncated [ 1541.150392][T19792] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800004000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:46 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00001100008000da55aa", 0x40, 0x1c0}]) 18:21:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b35, &(0x7f00000000c0)={0x2, {0x3}}) [ 1541.388629][T19797] loop1: p2 < > p3 p4 [ 1541.394989][T19797] loop1: partition table partially beyond EOD, truncated [ 1541.402259][T19797] loop1: p2 start 201326592 is beyond EOD, truncated [ 1541.409138][T19797] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1541.416885][T19797] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1541.434462][T19803] loop3: p2 < > p3 p4 18:21:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b35, &(0x7f00000000c0)={0x2, {0x3}}) [ 1541.438639][T19803] loop3: p2 size 2 extends beyond EOD, truncated [ 1541.445530][T19803] loop3: p3 start 225 is beyond EOD, truncated [ 1541.451727][T19803] loop3: p4 start 1114112 is beyond EOD, truncated 18:21:47 executing program 0: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000025024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1541.483671][T19801] loop2: p2 < > p3 p4 [ 1541.487899][T19801] loop2: p2 size 2 extends beyond EOD, truncated [ 1541.495663][T19801] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1541.503138][T19801] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:47 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00001200008000da55aa", 0x40, 0x1c0}]) [ 1541.664469][T19911] loop4: p2 < > p3 p4 [ 1541.668698][T19911] loop4: partition table partially beyond EOD, truncated [ 1541.676030][T19911] loop4: p2 start 16384 is beyond EOD, truncated [ 1541.682397][T19911] loop4: p3 start 225 is beyond EOD, truncated [ 1541.688698][T19911] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b35, &(0x7f00000000c0)={0x2, {0x3}}) [ 1541.724744][T19914] loop0: p2 < > p3 p4 [ 1541.729292][T19914] loop0: p2 size 2 extends beyond EOD, truncated [ 1541.736555][T19914] loop0: p3 start 225 is beyond EOD, truncated [ 1541.742826][T19914] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 1541.806404][T19918] loop3: p2 < > p3 p4 [ 1541.810745][T19918] loop3: p2 size 2 extends beyond EOD, truncated [ 1541.818083][T19918] loop3: p3 start 225 is beyond EOD, truncated [ 1541.824277][T19918] loop3: p4 start 1179648 is beyond EOD, truncated 18:21:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b34, &(0x7f00000000c0)={0x2, {0x3}}) [ 1541.905355][T19801] loop2: p2 < > p3 p4 [ 1541.909520][T19801] loop2: p2 size 2 extends beyond EOD, truncated [ 1541.916359][T19801] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1541.923993][T19801] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1541.932397][ T155] loop2: p2 < > p3 p4 [ 1541.936600][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1541.944487][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:47 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00002200008000da55aa", 0x40, 0x1c0}]) 18:21:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000000d0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b30, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:47 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000c00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1541.953746][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1542.004911][T20128] loop3: p2 < > p3 p4 [ 1542.009171][T20128] loop3: p2 size 2 extends beyond EOD, truncated [ 1542.016074][T20128] loop3: p3 start 225 is beyond EOD, truncated [ 1542.022434][T20128] loop3: p4 start 2228224 is beyond EOD, truncated [ 1542.153801][T20135] loop2: p2 < > p3 p4 [ 1542.157996][T20135] loop2: p2 size 2 extends beyond EOD, truncated [ 1542.174025][T20135] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1542.185344][T20135] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1542.187274][T20239] loop1: p2 < > p3 p4 18:21:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b34, &(0x7f00000000c0)={0x2, {0x3}}) 18:21:47 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00002500008000da55aa", 0x40, 0x1c0}]) 18:21:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800004800000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1542.202625][T20239] loop1: partition table partially beyond EOD, truncated [ 1542.210306][T20239] loop1: p2 start 218103808 is beyond EOD, truncated [ 1542.217104][T20239] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1542.226203][T20239] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b34, &(0x7f00000000c0)={0x2, {0x3}}) [ 1542.313741][T20135] loop2: p2 < > p3 p4 [ 1542.317920][T20135] loop2: p2 size 2 extends beyond EOD, truncated [ 1542.325471][T20135] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1542.332942][T20135] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:47 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000d00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1542.399398][T20246] loop3: p2 < > p3 p4 [ 1542.403760][T20246] loop3: p2 size 2 extends beyond EOD, truncated [ 1542.410512][T20246] loop3: p3 start 225 is beyond EOD, truncated [ 1542.416750][T20246] loop3: p4 start 2424832 is beyond EOD, truncated [ 1542.427117][ T155] loop2: p2 < > p3 p4 [ 1542.432198][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1542.439006][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:21:47 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 1) [ 1542.447355][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:48 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00004800008000da55aa", 0x40, 0x1c0}]) [ 1542.503980][T20353] loop4: p2 < > p3 p4 [ 1542.508064][T20353] loop4: partition table partially beyond EOD, truncated [ 1542.518381][T20353] loop4: p2 start 18432 is beyond EOD, truncated [ 1542.523690][T20459] FAULT_INJECTION: forcing a failure. [ 1542.523690][T20459] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.525626][T20353] loop4: p3 start 225 is beyond EOD, truncated [ 1542.537908][T20459] CPU: 0 PID: 20459 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1542.543490][T20353] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1542.553650][T20459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.553653][T20459] Call Trace: [ 1542.553670][T20459] dump_stack+0x18e/0x1de [ 1542.553688][T20459] should_fail+0x5d8/0x740 [ 1542.582711][T20459] ? __se_sys_memfd_create+0xe9/0x360 [ 1542.588053][T20459] should_failslab+0x5/0x20 [ 1542.592528][T20459] __kmalloc+0x5f/0x2f0 [ 1542.596656][T20459] ? fput_many+0x42/0x1a0 [ 1542.600956][T20459] ? check_preemption_disabled+0xde/0x2c0 [ 1542.606639][T20459] ? strnlen_user+0x186/0x210 [ 1542.611329][T20459] __se_sys_memfd_create+0xe9/0x360 [ 1542.616496][T20459] do_syscall_64+0xcb/0x1e0 [ 1542.620969][T20459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1542.626828][T20459] RIP: 0033:0x7f0ac6ecfae9 [ 1542.631210][T20459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.650789][T20459] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1542.659174][T20459] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1542.667113][T20459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1542.675052][T20459] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1542.682995][T20459] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1542.690938][T20459] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 18:21:48 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 2) [ 1542.707293][ T155] loop4: p2 < > p3 p4 [ 1542.712053][ T155] loop4: partition table partially beyond EOD, truncated [ 1542.719322][ T155] loop4: p2 start 18432 is beyond EOD, truncated [ 1542.725695][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1542.731853][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1542.753846][T20458] loop2: p2 < > p3 p4 [ 1542.758085][T20458] loop2: p2 size 2 extends beyond EOD, truncated [ 1542.765009][T20465] FAULT_INJECTION: forcing a failure. [ 1542.765009][T20465] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.765022][T20458] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1542.777706][T20465] CPU: 1 PID: 20465 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1542.787249][T20458] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1542.794899][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.794903][T20465] Call Trace: [ 1542.794919][T20465] dump_stack+0x18e/0x1de [ 1542.794931][T20465] should_fail+0x5d8/0x740 [ 1542.794945][T20465] ? shmem_alloc_inode+0x16/0x30 [ 1542.828874][T20465] should_failslab+0x5/0x20 [ 1542.833357][T20465] kmem_cache_alloc+0x36/0x290 [ 1542.838095][T20465] ? shmem_match+0x150/0x150 [ 1542.842657][T20465] shmem_alloc_inode+0x16/0x30 [ 1542.847386][T20465] new_inode_pseudo+0x61/0x220 [ 1542.852119][T20465] new_inode+0x25/0x1d0 [ 1542.856244][T20465] shmem_get_inode+0x113/0x630 [ 1542.860980][T20465] ? _raw_spin_unlock+0x49/0x60 [ 1542.865803][T20465] __shmem_file_setup+0x11e/0x270 [ 1542.870801][T20465] __se_sys_memfd_create+0x1ce/0x360 [ 1542.876055][T20465] do_syscall_64+0xcb/0x1e0 [ 1542.880550][T20465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1542.886414][T20465] RIP: 0033:0x7f0ac6ecfae9 [ 1542.890801][T20465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.910374][T20465] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1542.918765][T20465] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1542.926744][T20465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1542.934690][T20465] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1542.942635][T20465] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1542.950572][T20465] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 18:21:48 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 3) 18:21:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000000e0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1542.973951][T20462] loop3: p2 < > p3 p4 [ 1542.978090][T20462] loop3: p2 size 2 extends beyond EOD, truncated [ 1542.986333][T20462] loop3: p3 start 225 is beyond EOD, truncated [ 1542.992553][T20462] loop3: p4 start 4718592 is beyond EOD, truncated [ 1543.049960][T20468] FAULT_INJECTION: forcing a failure. [ 1543.049960][T20468] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.062592][T20468] CPU: 1 PID: 20468 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1543.072797][T20468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.082827][T20468] Call Trace: [ 1543.086109][T20468] dump_stack+0x18e/0x1de [ 1543.090427][T20468] should_fail+0x5d8/0x740 [ 1543.094835][T20468] ? security_inode_alloc+0x32/0x1d0 18:21:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800004c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1543.100095][T20468] should_failslab+0x5/0x20 [ 1543.104613][T20468] kmem_cache_alloc+0x36/0x290 [ 1543.109366][T20468] security_inode_alloc+0x32/0x1d0 [ 1543.114464][T20468] inode_init_always+0x387/0x810 [ 1543.119383][T20468] ? shmem_match+0x150/0x150 [ 1543.123984][T20468] new_inode_pseudo+0x90/0x220 [ 1543.128717][T20468] new_inode+0x25/0x1d0 [ 1543.132845][T20468] shmem_get_inode+0x113/0x630 [ 1543.137578][T20468] ? _raw_spin_unlock+0x49/0x60 [ 1543.142709][T20468] __shmem_file_setup+0x11e/0x270 [ 1543.147713][T20468] __se_sys_memfd_create+0x1ce/0x360 [ 1543.152980][T20468] do_syscall_64+0xcb/0x1e0 [ 1543.157453][T20468] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1543.163321][T20468] RIP: 0033:0x7f0ac6ecfae9 [ 1543.167714][T20468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.187290][T20468] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 18:21:48 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 4) [ 1543.195675][T20468] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1543.203620][T20468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1543.211564][T20468] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1543.219506][T20468] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1543.227448][T20468] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 18:21:48 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000e00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1543.307564][T20475] FAULT_INJECTION: forcing a failure. [ 1543.307564][T20475] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.309345][T20480] FAULT_INJECTION: forcing a failure. [ 1543.309345][T20480] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.320700][T20475] CPU: 1 PID: 20475 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1543.342963][T20475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.352992][T20475] Call Trace: [ 1543.356263][T20475] dump_stack+0x18e/0x1de [ 1543.360582][T20475] should_fail+0x5d8/0x740 [ 1543.360596][T20475] ? loop_add+0x56/0x710 [ 1543.369198][T20475] should_failslab+0x5/0x20 [ 1543.373681][T20475] kmem_cache_alloc_trace+0x39/0x2b0 [ 1543.378943][T20475] loop_add+0x56/0x710 [ 1543.382991][T20475] ? radix_tree_lookup+0x17a/0x1d0 [ 1543.388078][T20475] loop_control_ioctl+0x468/0x680 [ 1543.393081][T20475] ? xor_init+0x60/0x60 [ 1543.397215][T20475] do_vfs_ioctl+0x6fb/0x15b0 [ 1543.401794][T20475] __x64_sys_ioctl+0xd4/0x110 [ 1543.406445][T20475] do_syscall_64+0xcb/0x1e0 [ 1543.410927][T20475] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1543.416795][T20475] RIP: 0033:0x7f2c46c0dae9 [ 1543.421183][T20475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.440762][T20475] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.449144][T20475] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1543.457087][T20475] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1543.465033][T20475] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1543.472978][T20475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.480941][T20475] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1543.488915][T20480] CPU: 0 PID: 20480 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1543.490141][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1543.499129][T20480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.499132][T20480] Call Trace: [ 1543.499147][T20480] dump_stack+0x18e/0x1de [ 1543.499164][T20480] should_fail+0x5d8/0x740 [ 1543.509673][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1543.518896][T20480] ? __d_alloc+0x2a/0x6a0 [ 1543.518906][T20480] should_failslab+0x5/0x20 [ 1543.518920][T20480] kmem_cache_alloc+0x36/0x290 [ 1543.522934][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1543.526473][T20480] __d_alloc+0x2a/0x6a0 [ 1543.526484][T20480] d_alloc_pseudo+0x19/0x70 [ 1543.526498][T20480] alloc_file_pseudo+0xe5/0x240 [ 1543.577194][T20480] __shmem_file_setup+0x194/0x270 [ 1543.582209][T20480] __se_sys_memfd_create+0x1ce/0x360 [ 1543.587485][T20480] do_syscall_64+0xcb/0x1e0 [ 1543.591979][T20480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1543.597851][T20480] RIP: 0033:0x7f0ac6ecfae9 [ 1543.602232][T20480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.621805][T20480] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1543.630188][T20480] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1543.638126][T20480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1543.646066][T20480] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 18:21:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:49 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 5) [ 1543.654005][T20480] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1543.661945][T20480] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 [ 1543.685140][T20483] loop4: p2 < > p3 p4 [ 1543.689255][T20483] loop4: partition table partially beyond EOD, truncated [ 1543.696510][T20483] loop4: p2 start 19456 is beyond EOD, truncated [ 1543.702826][T20483] loop4: p3 start 225 is beyond EOD, truncated 18:21:49 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00004c00008000da55aa", 0x40, 0x1c0}]) [ 1543.710057][ T349] udevd[349]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1543.725953][T20472] loop1: p2 < > p3 p4 [ 1543.726157][T20483] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1543.730117][T20472] loop1: partition table partially beyond EOD, truncated [ 1543.744392][T20472] loop1: p2 start 234881024 is beyond EOD, truncated [ 1543.751050][T20472] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1543.755031][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1543.763966][T20472] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1543.768305][T20486] loop2: p2 < > p3 p4 [ 1543.775169][T20491] FAULT_INJECTION: forcing a failure. [ 1543.775169][T20491] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.779102][T20486] loop2: p2 size 2 extends beyond EOD, truncated [ 1543.791521][T20491] CPU: 0 PID: 20491 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1543.791531][T20491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.799138][T20486] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1543.808041][T20491] Call Trace: [ 1543.808056][T20491] dump_stack+0x18e/0x1de [ 1543.808069][T20491] should_fail+0x5d8/0x740 [ 1543.808081][T20491] ? context_struct_to_string+0x3a5/0x7c0 [ 1543.808092][T20491] should_failslab+0x5/0x20 [ 1543.808101][T20491] __kmalloc+0x5f/0x2f0 [ 1543.808114][T20491] context_struct_to_string+0x3a5/0x7c0 [ 1543.808130][T20491] context_add_hash+0xe6/0x1d0 [ 1543.808141][T20491] security_compute_sid+0xfcb/0x1a70 [ 1543.808162][T20491] security_transition_sid+0x78/0x90 [ 1543.819387][T20486] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1543.825267][T20491] inode_doinit_with_dentry+0x58a/0x1170 [ 1543.825282][T20491] security_d_instantiate+0xa5/0x100 [ 1543.825292][T20491] d_instantiate+0x51/0x90 [ 1543.825304][T20491] alloc_file_pseudo+0x1b2/0x240 [ 1543.899487][T20491] __shmem_file_setup+0x194/0x270 [ 1543.899503][T20491] __se_sys_memfd_create+0x1ce/0x360 [ 1543.909749][T20491] do_syscall_64+0xcb/0x1e0 [ 1543.914222][T20491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1543.920080][T20491] RIP: 0033:0x7f0ac6ecfae9 [ 1543.924464][T20491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.944034][T20491] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1543.952412][T20491] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1543.960388][T20491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1543.968366][T20491] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1543.976305][T20491] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1543.984247][T20491] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 [ 1543.993263][T20489] FAULT_INJECTION: forcing a failure. [ 1543.993263][T20489] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.006031][T20489] CPU: 1 PID: 20489 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1544.016234][T20489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.026257][T20489] Call Trace: [ 1544.029531][T20489] dump_stack+0x18e/0x1de [ 1544.033833][T20489] should_fail+0x5d8/0x740 [ 1544.038219][T20489] ? blk_mq_alloc_tag_set+0x312/0xe60 [ 1544.043561][T20489] should_failslab+0x5/0x20 [ 1544.048044][T20489] __kmalloc+0x5f/0x2f0 [ 1544.052175][T20489] blk_mq_alloc_tag_set+0x312/0xe60 [ 1544.057383][T20489] ? idr_alloc+0x1c3/0x280 [ 1544.061774][T20489] loop_add+0x22b/0x710 [ 1544.065903][T20489] ? radix_tree_lookup+0x17a/0x1d0 [ 1544.070988][T20489] loop_control_ioctl+0x468/0x680 [ 1544.075981][T20489] ? xor_init+0x60/0x60 [ 1544.080106][T20489] do_vfs_ioctl+0x6fb/0x15b0 [ 1544.084677][T20489] __x64_sys_ioctl+0xd4/0x110 [ 1544.089383][T20489] do_syscall_64+0xcb/0x1e0 [ 1544.093894][T20489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1544.099757][T20489] RIP: 0033:0x7f2c46c0dae9 [ 1544.104139][T20489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.123717][T20489] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.132108][T20489] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1544.140053][T20489] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1544.147997][T20489] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 18:21:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800005200000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1544.155940][T20489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.163884][T20489] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1544.172926][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory 18:21:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000100000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1544.254359][T20502] FAULT_INJECTION: forcing a failure. [ 1544.254359][T20502] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.267038][T20502] CPU: 0 PID: 20502 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1544.277249][T20502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.287274][T20502] Call Trace: [ 1544.290536][T20502] dump_stack+0x18e/0x1de [ 1544.294836][T20502] should_fail+0x5d8/0x740 [ 1544.299222][T20502] ? blk_mq_alloc_tag_set+0x3ca/0xe60 [ 1544.304565][T20502] should_failslab+0x5/0x20 [ 1544.309034][T20502] __kmalloc+0x5f/0x2f0 [ 1544.313163][T20502] ? blk_mq_alloc_tag_set+0x312/0xe60 [ 1544.318511][T20502] blk_mq_alloc_tag_set+0x3ca/0xe60 [ 1544.323683][T20502] loop_add+0x22b/0x710 [ 1544.327814][T20502] ? radix_tree_lookup+0x17a/0x1d0 [ 1544.332910][T20502] loop_control_ioctl+0x468/0x680 [ 1544.332924][T20502] ? xor_init+0x60/0x60 [ 1544.342045][T20502] do_vfs_ioctl+0x6fb/0x15b0 [ 1544.346609][T20502] __x64_sys_ioctl+0xd4/0x110 [ 1544.351255][T20502] do_syscall_64+0xcb/0x1e0 [ 1544.355736][T20502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1544.361819][T20502] RIP: 0033:0x7f2c46c0dae9 [ 1544.366202][T20502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.385776][T20502] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.394155][T20502] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1544.402095][T20502] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1544.410033][T20502] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1544.417973][T20502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.425912][T20502] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1544.437654][T20491] loop5: p2 < > p3 p4 [ 1544.438019][ T155] loop1: p2 < > p3 p4 [ 1544.441906][T20491] loop5: p2 size 2 extends beyond EOD, truncated 18:21:49 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001100000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1544.446130][ T155] loop1: partition table partially beyond EOD, truncated [ 1544.452719][T20491] loop5: p3 start 225 is beyond EOD, truncated [ 1544.459556][ T155] loop1: p2 start 234881024 is beyond EOD, truncated [ 1544.465346][T20491] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1544.472190][ T155] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1544.488650][ T155] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1544.491823][T20499] loop3: p2 < > p3 p4 18:21:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1544.499945][T20499] loop3: p2 size 2 extends beyond EOD, truncated [ 1544.506847][T20499] loop3: p3 start 225 is beyond EOD, truncated [ 1544.512994][T20499] loop3: p4 start 4980736 is beyond EOD, truncated 18:21:50 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 6) [ 1544.554082][T20513] FAULT_INJECTION: forcing a failure. [ 1544.554082][T20513] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.566699][T20513] CPU: 1 PID: 20513 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1544.576908][T20513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.586942][T20513] Call Trace: [ 1544.590220][T20513] dump_stack+0x18e/0x1de [ 1544.594534][T20513] should_fail+0x5d8/0x740 [ 1544.598940][T20513] ? blk_mq_init_tags+0x74/0x290 [ 1544.603856][T20513] should_failslab+0x5/0x20 [ 1544.608331][T20513] kmem_cache_alloc_trace+0x39/0x2b0 [ 1544.613586][T20513] blk_mq_init_tags+0x74/0x290 [ 1544.618317][T20513] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 1544.623837][T20513] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1544.628829][T20513] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1544.633998][T20513] loop_add+0x22b/0x710 [ 1544.638133][T20513] ? radix_tree_lookup+0x17a/0x1d0 [ 1544.643219][T20513] loop_control_ioctl+0x468/0x680 [ 1544.648209][T20513] ? xor_init+0x60/0x60 [ 1544.652343][T20513] do_vfs_ioctl+0x6fb/0x15b0 [ 1544.656906][T20513] __x64_sys_ioctl+0xd4/0x110 [ 1544.661555][T20513] do_syscall_64+0xcb/0x1e0 [ 1544.666029][T20513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1544.671895][T20513] RIP: 0033:0x7f2c46c0dae9 [ 1544.676293][T20513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.695874][T20513] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.704263][T20513] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1544.712207][T20513] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1544.720154][T20513] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1544.728090][T20513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.736027][T20513] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1544.744163][T20513] blk-mq: reduced tag depth (128 -> 64) [ 1544.756864][T20521] FAULT_INJECTION: forcing a failure. [ 1544.756864][T20521] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.769553][T20521] CPU: 0 PID: 20521 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1544.779758][T20521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.789785][T20521] Call Trace: [ 1544.793048][T20521] dump_stack+0x18e/0x1de [ 1544.797350][T20521] should_fail+0x5d8/0x740 [ 1544.801738][T20521] ? __alloc_file+0x26/0x380 [ 1544.806298][T20521] should_failslab+0x5/0x20 [ 1544.810770][T20521] kmem_cache_alloc+0x36/0x290 [ 1544.815505][T20521] __alloc_file+0x26/0x380 [ 1544.819887][T20521] ? alloc_empty_file+0x49/0x1b0 [ 1544.824794][T20521] alloc_empty_file+0xa9/0x1b0 [ 1544.829536][T20521] alloc_file+0x57/0x4d0 [ 1544.833756][T20521] alloc_file_pseudo+0x1c5/0x240 [ 1544.838675][T20521] __shmem_file_setup+0x194/0x270 [ 1544.843681][T20521] __se_sys_memfd_create+0x1ce/0x360 [ 1544.848945][T20521] do_syscall_64+0xcb/0x1e0 [ 1544.853463][T20521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1544.859338][T20521] RIP: 0033:0x7f0ac6ecfae9 [ 1544.863720][T20521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.883332][T20521] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1544.891713][T20521] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1544.899656][T20521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb 18:21:50 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 7) [ 1544.907638][T20521] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1544.915578][T20521] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1544.923517][T20521] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 18:21:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:50 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00006000008000da55aa", 0x40, 0x1c0}]) [ 1545.015882][T20514] loop2: p2 < > p3 p4 [ 1545.020050][T20514] loop2: p2 size 2 extends beyond EOD, truncated [ 1545.026960][T20514] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1545.034595][T20514] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1545.073645][T20516] loop4: p2 < > p3 p4 [ 1545.077732][T20516] loop4: partition table partially beyond EOD, truncated [ 1545.086399][T20516] loop4: p2 start 20992 is beyond EOD, truncated [ 1545.092724][T20516] loop4: p3 start 225 is beyond EOD, truncated [ 1545.094827][T20527] FAULT_INJECTION: forcing a failure. [ 1545.094827][T20527] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.099133][T20516] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:50 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) (fail_nth: 8) [ 1545.111865][T20527] CPU: 1 PID: 20527 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1545.128772][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.128775][T20527] Call Trace: [ 1545.128786][T20527] dump_stack+0x18e/0x1de [ 1545.128795][T20527] should_fail+0x5d8/0x740 [ 1545.128803][T20527] ? security_file_alloc+0x32/0x1f0 [ 1545.128809][T20527] should_failslab+0x5/0x20 [ 1545.128815][T20527] kmem_cache_alloc+0x36/0x290 [ 1545.128822][T20527] security_file_alloc+0x32/0x1f0 [ 1545.128828][T20527] __alloc_file+0xba/0x380 [ 1545.128834][T20527] alloc_empty_file+0xa9/0x1b0 [ 1545.128839][T20527] alloc_file+0x57/0x4d0 [ 1545.128845][T20527] alloc_file_pseudo+0x1c5/0x240 [ 1545.128854][T20527] __shmem_file_setup+0x194/0x270 [ 1545.128861][T20527] __se_sys_memfd_create+0x1ce/0x360 [ 1545.128867][T20527] do_syscall_64+0xcb/0x1e0 [ 1545.128874][T20527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1545.128880][T20527] RIP: 0033:0x7f0ac6ecfae9 [ 1545.128885][T20527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.128888][T20527] RSP: 002b:00007f0ac4c45e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1545.128893][T20527] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f0ac6ecfae9 [ 1545.128896][T20527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0ac6f290fb [ 1545.128899][T20527] RBP: 0000000000000006 R08: 000000ac45ff0000 R09: 0000000000000000 [ 1545.128901][T20527] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000008100000 [ 1545.128904][T20527] R13: 00007ffe8f8f479f R14: 0000000000000380 R15: 0000000000022000 [ 1545.290739][T20536] FAULT_INJECTION: forcing a failure. [ 1545.290739][T20536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.304029][T20536] CPU: 0 PID: 20536 Comm: syz-executor.5 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1545.314234][T20536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.324256][T20536] Call Trace: [ 1545.327521][T20536] dump_stack+0x18e/0x1de [ 1545.331820][T20536] should_fail+0x5d8/0x740 [ 1545.336207][T20536] __alloc_pages_nodemask+0x12e/0x740 [ 1545.341618][T20536] shmem_getpage_gfp+0xcb0/0x1fc0 [ 1545.346623][T20536] shmem_write_begin+0xc5/0x190 [ 1545.351445][T20536] generic_perform_write+0x290/0x510 [ 1545.356703][T20536] ? current_time+0x156/0x250 [ 1545.361351][T20536] __generic_file_write_iter+0x239/0x480 [ 1545.366949][T20536] ? down_write+0x9a/0x100 [ 1545.371369][T20536] generic_file_write_iter+0x46d/0x600 [ 1545.376848][T20536] __vfs_write+0x506/0x6b0 [ 1545.381233][T20536] vfs_write+0x212/0x4e0 [ 1545.385444][T20536] __x64_sys_pwrite64+0x14e/0x1c0 [ 1545.390434][T20536] do_syscall_64+0xcb/0x1e0 [ 1545.394905][T20536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1545.400763][T20536] RIP: 0033:0x7f0ac6e82ab7 [ 1545.405147][T20536] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1545.424759][T20536] RSP: 002b:00007f0ac4c45e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1545.433134][T20536] RAX: ffffffffffffffda RBX: 00007f0ac6f19970 RCX: 00007f0ac6e82ab7 [ 1545.441074][T20536] RDX: 0000000000000040 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1545.449010][T20536] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 1545.456947][T20536] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000004 [ 1545.464884][T20536] R13: 0000000000000004 R14: 0000000020000040 R15: 0000000000000000 [ 1545.493432][T20532] FAULT_INJECTION: forcing a failure. [ 1545.493432][T20532] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.506178][T20532] CPU: 1 PID: 20532 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1545.506757][ T155] loop4: p2 < > p3 p4 [ 1545.516396][T20532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.516400][T20532] Call Trace: [ 1545.516417][T20532] dump_stack+0x18e/0x1de [ 1545.516431][T20532] should_fail+0x5d8/0x740 [ 1545.516441][T20532] ? sbitmap_init_node+0x145/0x3d0 [ 1545.516452][T20532] should_failslab+0x5/0x20 [ 1545.516461][T20532] __kmalloc+0x5f/0x2f0 [ 1545.516472][T20532] sbitmap_init_node+0x145/0x3d0 [ 1545.516484][T20532] sbitmap_queue_init_node+0x2f/0xbe0 [ 1545.516493][T20532] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 1545.516501][T20532] ? blk_mq_init_tags+0x74/0x290 [ 1545.516511][T20532] blk_mq_init_tags+0xef/0x290 [ 1545.516520][T20532] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1545.516533][T20532] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1545.520613][ T155] loop4: partition table partially beyond EOD, truncated [ 1545.530611][T20532] loop_add+0x22b/0x710 [ 1545.530621][T20532] ? radix_tree_lookup+0x17a/0x1d0 [ 1545.530629][T20532] loop_control_ioctl+0x468/0x680 [ 1545.530637][T20532] ? xor_init+0x60/0x60 [ 1545.530651][T20532] do_vfs_ioctl+0x6fb/0x15b0 [ 1545.534020][ T155] loop4: p2 start 20992 is beyond EOD, truncated [ 1545.538205][T20532] __x64_sys_ioctl+0xd4/0x110 [ 1545.538218][T20532] do_syscall_64+0xcb/0x1e0 [ 1545.542622][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1545.547699][T20532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1545.547706][T20532] RIP: 0033:0x7f2c46c0dae9 [ 1545.547719][T20532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.552194][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1545.556305][T20532] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.556314][T20532] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1545.556323][T20532] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1545.704315][T20532] RBP: 00007f2c449631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.712293][T20532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.720230][T20532] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1545.728727][T20532] blk-mq: reduced tag depth (128 -> 64) 18:21:51 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001200000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 6) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1545.764288][T20522] loop1: p2 < > p3 p4 [ 1545.768993][T20522] loop1: partition table partially beyond EOD, truncated [ 1545.776934][T20522] loop1: p2 start 268435456 is beyond EOD, truncated [ 1545.786704][T20522] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1545.794385][T20522] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1545.854065][T20530] loop3: p2 < > p3 p4 [ 1545.858251][T20530] loop3: p2 size 2 extends beyond EOD, truncated [ 1545.865148][T20530] loop3: p3 start 225 is beyond EOD, truncated [ 1545.871319][T20530] loop3: p4 start 6291456 is beyond EOD, truncated 18:21:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000110000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:51 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00006800008000da55aa", 0x40, 0x1c0}]) [ 1546.053365][T20548] FAULT_INJECTION: forcing a failure. [ 1546.053365][T20548] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.066021][T20548] CPU: 1 PID: 20548 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1546.076228][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.086253][T20548] Call Trace: [ 1546.089514][T20548] dump_stack+0x18e/0x1de [ 1546.093815][T20548] should_fail+0x5d8/0x740 [ 1546.098202][T20548] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1546.103805][T20548] should_failslab+0x5/0x20 [ 1546.108274][T20548] kmem_cache_alloc_trace+0x39/0x2b0 [ 1546.113535][T20548] sbitmap_queue_init_node+0x3db/0xbe0 [ 1546.118977][T20548] blk_mq_init_tags+0xef/0x290 [ 1546.123712][T20548] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1546.128716][T20548] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1546.133929][T20548] loop_add+0x22b/0x710 [ 1546.138060][T20548] ? radix_tree_lookup+0x17a/0x1d0 [ 1546.143137][T20548] loop_control_ioctl+0x468/0x680 [ 1546.148133][T20548] ? xor_init+0x60/0x60 [ 1546.152263][T20548] do_vfs_ioctl+0x6fb/0x15b0 [ 1546.156826][T20548] __x64_sys_ioctl+0xd4/0x110 [ 1546.161472][T20548] do_syscall_64+0xcb/0x1e0 [ 1546.165946][T20548] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1546.171812][T20548] RIP: 0033:0x7f2c46c0dae9 [ 1546.176209][T20548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.195792][T20548] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.204183][T20548] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1546.212132][T20548] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1546.220083][T20548] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.228031][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.235968][T20548] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1546.244102][T20548] blk-mq: reduced tag depth (128 -> 64) 18:21:51 executing program 5: syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1546.355651][T20542] loop2: p2 < > p3 p4 [ 1546.359825][T20542] loop2: p2 size 2 extends beyond EOD, truncated [ 1546.366740][T20542] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1546.374343][T20542] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1546.494137][T20551] loop4: p2 < > p3 p4 [ 1546.498593][T20560] FAULT_INJECTION: forcing a failure. [ 1546.498593][T20560] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.504972][T20551] loop4: partition table partially beyond EOD, truncated [ 1546.511292][T20560] CPU: 0 PID: 20560 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1546.519198][T20551] loop4: p2 start 24576 is beyond EOD, truncated [ 1546.528401][T20560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.528404][T20560] Call Trace: [ 1546.528420][T20560] dump_stack+0x18e/0x1de [ 1546.528433][T20560] should_fail+0x5d8/0x740 [ 1546.528442][T20560] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1546.528458][T20560] should_failslab+0x5/0x20 [ 1546.534850][T20551] loop4: p3 start 225 is beyond EOD, truncated [ 1546.544785][T20560] kmem_cache_alloc_trace+0x39/0x2b0 [ 1546.544798][T20560] sbitmap_queue_init_node+0x3db/0xbe0 [ 1546.544810][T20560] blk_mq_init_tags+0x153/0x290 [ 1546.544822][T20560] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1546.548150][T20551] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1546.552377][T20560] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1546.552392][T20560] loop_add+0x22b/0x710 [ 1546.552400][T20560] ? radix_tree_lookup+0x17a/0x1d0 [ 1546.552413][T20560] loop_control_ioctl+0x468/0x680 [ 1546.561713][ T155] loop2: p2 < > p3 p4 [ 1546.562396][T20560] ? xor_init+0x60/0x60 [ 1546.562407][T20560] do_vfs_ioctl+0x6fb/0x15b0 [ 1546.562416][T20560] ? apic_timer_interrupt+0xa/0x20 [ 1546.562429][T20560] ? __x64_sys_ioctl+0xa7/0x110 [ 1546.567100][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1546.573020][T20560] ? __x64_sys_ioctl+0xc3/0x110 [ 1546.573033][T20560] __x64_sys_ioctl+0xd4/0x110 [ 1546.573043][T20560] do_syscall_64+0xcb/0x1e0 [ 1546.573053][T20560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1546.573065][T20560] RIP: 0033:0x7f2c46c0dae9 [ 1546.579584][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1546.583746][T20560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.583751][T20560] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.583760][T20560] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1546.583764][T20560] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1546.583769][T20560] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.583773][T20560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.583784][T20560] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1546.589124][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1546.594576][T20560] blk-mq: reduced tag depth (128 -> 64) [ 1546.804567][T20557] loop5: p2 < > p3 p4 [ 1546.808735][T20557] loop5: p2 size 2 extends beyond EOD, truncated [ 1546.815659][T20557] loop5: p3 start 225 is beyond EOD, truncated [ 1546.821824][T20557] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006800000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1547.004549][T20564] loop3: p2 < > p3 p4 [ 1547.008725][T20564] loop3: p2 size 2 extends beyond EOD, truncated [ 1547.015567][T20564] loop3: p3 start 225 is beyond EOD, truncated [ 1547.021702][T20564] loop3: p4 start 6815744 is beyond EOD, truncated 18:21:52 executing program 5: syz_read_part_table(0x2, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1547.105137][T20566] loop1: p2 < > p3 p4 [ 1547.109237][T20566] loop1: partition table partially beyond EOD, truncated [ 1547.116639][T20566] loop1: p2 start 285212672 is beyond EOD, truncated [ 1547.123493][T20566] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1547.130979][T20566] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:52 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001f00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1547.214519][T20572] FAULT_INJECTION: forcing a failure. [ 1547.214519][T20572] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.227209][T20572] CPU: 0 PID: 20572 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1547.237427][T20572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.237431][T20572] Call Trace: [ 1547.237447][T20572] dump_stack+0x18e/0x1de [ 1547.237463][T20572] should_fail+0x5d8/0x740 [ 1547.259475][T20572] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1547.264650][T20572] should_failslab+0x5/0x20 [ 1547.269122][T20572] __kmalloc+0x5f/0x2f0 [ 1547.273246][T20572] ? blk_mq_init_tags+0x209/0x290 [ 1547.278235][T20572] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1547.283226][T20572] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1547.288405][T20572] loop_add+0x22b/0x710 [ 1547.292533][T20572] ? radix_tree_lookup+0x17a/0x1d0 [ 1547.297620][T20572] loop_control_ioctl+0x468/0x680 [ 1547.302629][T20572] ? xor_init+0x60/0x60 [ 1547.306766][T20572] do_vfs_ioctl+0x6fb/0x15b0 [ 1547.311329][T20572] __x64_sys_ioctl+0xd4/0x110 [ 1547.315985][T20572] do_syscall_64+0xcb/0x1e0 [ 1547.320465][T20572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1547.326327][T20572] RIP: 0033:0x7f2c46c0dae9 [ 1547.330710][T20572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.350281][T20572] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.358657][T20572] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1547.366594][T20572] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1547.374534][T20572] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.382474][T20572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.390411][T20572] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1547.399761][T20572] blk-mq: reduced tag depth (128 -> 64) 18:21:52 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00006c00008000da55aa", 0x40, 0x1c0}]) 18:21:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 9) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000120000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1547.607125][T20588] FAULT_INJECTION: forcing a failure. [ 1547.607125][T20588] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.607295][T20583] loop3: p2 < > p3 p4 [ 1547.619767][T20588] CPU: 1 PID: 20588 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1547.624349][T20583] loop3: p2 size 2 extends beyond EOD, truncated [ 1547.634004][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.634007][T20588] Call Trace: [ 1547.634021][T20588] dump_stack+0x18e/0x1de [ 1547.634034][T20588] should_fail+0x5d8/0x740 [ 1547.634043][T20588] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1547.634058][T20588] should_failslab+0x5/0x20 [ 1547.642951][T20580] loop5: p2 < > p3 p4 [ 1547.650387][T20588] __kmalloc+0x5f/0x2f0 [ 1547.650395][T20588] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1547.650406][T20588] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1547.650415][T20588] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1547.650432][T20588] loop_add+0x22b/0x710 [ 1547.653868][T20580] loop5: p2 size 2 extends beyond EOD, truncated [ 1547.657985][T20588] ? radix_tree_lookup+0x17a/0x1d0 [ 1547.658001][T20588] loop_control_ioctl+0x468/0x680 [ 1547.664486][T20583] loop3: p3 start 225 is beyond EOD, truncated [ 1547.667549][T20588] ? xor_init+0x60/0x60 [ 1547.667561][T20588] do_vfs_ioctl+0x6fb/0x15b0 [ 1547.667575][T20588] __x64_sys_ioctl+0xd4/0x110 [ 1547.667588][T20588] do_syscall_64+0xcb/0x1e0 [ 1547.672137][T20583] loop3: p4 start 7077888 is beyond EOD, truncated [ 1547.676095][T20588] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1547.676102][T20588] RIP: 0033:0x7f2c46c0dae9 [ 1547.676110][T20588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.676115][T20588] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.676123][T20588] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1547.676128][T20588] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1547.676132][T20588] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.676136][T20588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.676146][T20588] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1547.681196][T20580] loop5: p3 start 225 is beyond EOD, truncated [ 1547.685636][T20588] blk-mq: reduced tag depth (128 -> 64) [ 1547.691201][T20580] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 10) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1547.884196][T20578] loop2: p2 < > p3 p4 [ 1547.888385][T20578] loop2: p2 size 2 extends beyond EOD, truncated [ 1547.895322][T20578] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1547.902836][T20578] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1547.964252][T20594] loop4: p2 < > p3 p4 [ 1547.968332][T20594] loop4: partition table partially beyond EOD, truncated [ 1547.975579][T20594] loop4: p2 start 26624 is beyond EOD, truncated [ 1547.981881][T20594] loop4: p3 start 225 is beyond EOD, truncated [ 1547.988173][T20594] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:53 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00007400008000da55aa", 0x40, 0x1c0}]) [ 1548.163692][T20602] FAULT_INJECTION: forcing a failure. [ 1548.163692][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.167001][T20598] loop1: p2 < > p3 p4 [ 1548.176308][T20602] CPU: 1 PID: 20602 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1548.176313][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.176316][T20602] Call Trace: [ 1548.176335][T20602] dump_stack+0x18e/0x1de [ 1548.180670][T20598] loop1: partition table partially beyond EOD, truncated [ 1548.190599][T20602] should_fail+0x5d8/0x740 [ 1548.190611][T20602] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1548.190620][T20602] should_failslab+0x5/0x20 [ 1548.190628][T20602] __kmalloc+0x5f/0x2f0 [ 1548.190635][T20602] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1548.190648][T20602] ? blk_mq_init_tags+0x209/0x290 [ 1548.200971][T20598] loop1: p2 start 301989888 is beyond EOD, truncated [ 1548.203948][T20602] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1548.203959][T20602] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 1548.203972][T20602] loop_add+0x22b/0x710 [ 1548.203986][T20602] ? radix_tree_lookup+0x17a/0x1d0 [ 1548.208357][T20598] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1548.215270][T20602] loop_control_ioctl+0x468/0x680 [ 1548.215279][T20602] ? xor_init+0x60/0x60 [ 1548.215290][T20602] do_vfs_ioctl+0x6fb/0x15b0 [ 1548.215310][T20602] __x64_sys_ioctl+0xd4/0x110 [ 1548.220321][T20598] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1548.224857][T20602] do_syscall_64+0xcb/0x1e0 [ 1548.224869][T20602] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1548.224876][T20602] RIP: 0033:0x7f2c46c0dae9 [ 1548.224885][T20602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.224894][T20602] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.344829][T20602] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 18:21:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800006c00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1548.344833][T20602] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1548.344838][T20602] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.344841][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.344845][T20602] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1548.345040][T20602] blk-mq: reduced tag depth (128 -> 64) [ 1548.370166][ T155] loop1: p2 < > p3 p4 [ 1548.400297][ T155] loop1: partition table partially beyond EOD, truncated [ 1548.407507][ T155] loop1: p2 start 301989888 is beyond EOD, truncated [ 1548.414229][ T155] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1548.421750][ T155] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:21:54 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005002900000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 11) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:54 executing program 5: syz_read_part_table(0x3, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000001f0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1548.603797][T20609] loop3: p2 < > p3 p4 [ 1548.608278][T20609] loop3: p2 size 2 extends beyond EOD, truncated [ 1548.616940][T20609] loop3: p3 start 225 is beyond EOD, truncated [ 1548.623139][T20609] loop3: p4 start 7602176 is beyond EOD, truncated [ 1548.655654][T20620] FAULT_INJECTION: forcing a failure. [ 1548.655654][T20620] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.668255][T20620] CPU: 1 PID: 20620 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1548.678459][T20620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.688485][T20620] Call Trace: [ 1548.691755][T20620] dump_stack+0x18e/0x1de [ 1548.696058][T20620] should_fail+0x5d8/0x740 [ 1548.700448][T20620] ? blk_alloc_queue_node+0x2c/0x570 [ 1548.705706][T20620] should_failslab+0x5/0x20 [ 1548.710184][T20620] kmem_cache_alloc+0x36/0x290 [ 1548.714923][T20620] ? __mutex_init+0x9d/0xf0 [ 1548.719401][T20620] blk_alloc_queue_node+0x2c/0x570 [ 1548.724482][T20620] blk_mq_init_queue+0x33/0xa0 [ 1548.729220][T20620] loop_add+0x256/0x710 [ 1548.733348][T20620] ? radix_tree_lookup+0x17a/0x1d0 [ 1548.738431][T20620] loop_control_ioctl+0x468/0x680 [ 1548.743424][T20620] ? xor_init+0x60/0x60 [ 1548.747551][T20620] do_vfs_ioctl+0x6fb/0x15b0 [ 1548.752113][T20620] __x64_sys_ioctl+0xd4/0x110 [ 1548.756760][T20620] do_syscall_64+0xcb/0x1e0 [ 1548.761235][T20620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1548.767100][T20620] RIP: 0033:0x7f2c46c0dae9 [ 1548.771488][T20620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.791063][T20620] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.799442][T20620] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1548.807383][T20620] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1548.815325][T20620] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.823267][T20620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.831209][T20620] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:21:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 12) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1548.903738][T20615] loop4: p2 < > p3 p4 [ 1548.907822][T20615] loop4: partition table partially beyond EOD, truncated [ 1548.915211][T20615] loop4: p2 start 27648 is beyond EOD, truncated [ 1548.921537][T20615] loop4: p3 start 225 is beyond EOD, truncated [ 1548.921551][T20615] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:21:54 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00007a00008000da55aa", 0x40, 0x1c0}]) [ 1548.953829][T20621] loop5: p2 < > p3 p4 [ 1548.958066][T20621] loop5: p2 size 2 extends beyond EOD, truncated [ 1548.965464][T20617] loop2: p2 < > p3 p4 [ 1548.967295][T20621] loop5: p3 start 225 is beyond EOD, truncated [ 1548.971825][T20617] loop2: p2 size 2 extends beyond EOD, truncated [ 1548.976079][T20621] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1548.988556][T20617] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1548.996700][T20617] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1549.096355][T20632] FAULT_INJECTION: forcing a failure. [ 1549.096355][T20632] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.109043][T20632] CPU: 1 PID: 20632 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1549.119259][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.129286][T20632] Call Trace: [ 1549.132552][T20632] dump_stack+0x18e/0x1de [ 1549.136855][T20632] should_fail+0x5d8/0x740 [ 1549.141242][T20632] ? mempool_init_node+0x131/0x500 18:21:54 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005004000000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1549.146320][T20632] should_failslab+0x5/0x20 [ 1549.150796][T20632] __kmalloc+0x5f/0x2f0 [ 1549.154935][T20632] mempool_init_node+0x131/0x500 [ 1549.159860][T20632] ? ida_alloc_range+0x8e5/0x940 [ 1549.164776][T20632] ? mempool_free+0x380/0x380 [ 1549.169421][T20632] ? mempool_alloc_slab+0x20/0x20 [ 1549.174422][T20632] mempool_init+0x35/0x50 [ 1549.178731][T20632] bioset_init+0x465/0x610 [ 1549.183132][T20632] blk_alloc_queue_node+0xc4/0x570 [ 1549.188220][T20632] blk_mq_init_queue+0x33/0xa0 [ 1549.192959][T20632] loop_add+0x256/0x710 [ 1549.197096][T20632] ? radix_tree_lookup+0x17a/0x1d0 [ 1549.202176][T20632] loop_control_ioctl+0x468/0x680 [ 1549.207176][T20632] ? xor_init+0x60/0x60 [ 1549.211311][T20632] do_vfs_ioctl+0x6fb/0x15b0 [ 1549.215873][T20632] __x64_sys_ioctl+0xd4/0x110 [ 1549.220523][T20632] do_syscall_64+0xcb/0x1e0 [ 1549.224997][T20632] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1549.230902][T20632] RIP: 0033:0x7f2c46c0dae9 [ 1549.235284][T20632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.254854][T20632] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.263231][T20632] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1549.271171][T20632] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1549.279166][T20632] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.287154][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:21:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 13) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800007400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1549.295094][T20632] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1549.349019][T20633] loop3: p2 < > p3 p4 [ 1549.353261][T20633] loop3: p2 size 2 extends beyond EOD, truncated [ 1549.360154][T20633] loop3: p3 start 225 is beyond EOD, truncated [ 1549.366360][T20633] loop3: p4 start 7995392 is beyond EOD, truncated 18:21:54 executing program 5: syz_read_part_table(0x4, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:54 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00009000008000da55aa", 0x40, 0x1c0}]) [ 1549.535566][T20641] loop2: p2 < > p3 p4 [ 1549.540067][T20634] loop1: p2 < > p3 p4 [ 1549.540816][T20641] loop2: p2 size 2 extends beyond EOD, truncated [ 1549.549081][T20634] loop1: partition table partially beyond EOD, truncated [ 1549.552570][T20641] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1549.559446][T20634] loop1: p2 start 520093696 is beyond EOD, truncated [ 1549.565476][T20641] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1549.572038][T20634] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1549.586576][T20634] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1549.633785][T20644] loop4: p2 < > p3 p4 [ 1549.635305][T20651] FAULT_INJECTION: forcing a failure. [ 1549.635305][T20651] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.637962][T20644] loop4: partition table partially beyond EOD, truncated [ 1549.650465][T20651] CPU: 1 PID: 20651 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1549.650475][T20651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.658085][T20644] loop4: p2 start 29696 is beyond EOD, truncated [ 1549.667661][T20651] Call Trace: [ 1549.667678][T20651] dump_stack+0x18e/0x1de [ 1549.667691][T20651] should_fail+0x5d8/0x740 [ 1549.667702][T20651] ? mempool_alloc_slab+0x16/0x20 [ 1549.667710][T20651] should_failslab+0x5/0x20 [ 1549.667723][T20651] kmem_cache_alloc+0x36/0x290 [ 1549.678186][T20644] loop4: p3 start 225 is beyond EOD, truncated [ 1549.684049][T20651] ? __kmalloc+0x174/0x2f0 [ 1549.684058][T20651] ? mempool_init_node+0x131/0x500 [ 1549.684068][T20651] mempool_alloc_slab+0x16/0x20 [ 1549.684075][T20651] ? mempool_free+0x380/0x380 [ 1549.684087][T20651] mempool_init_node+0x1f6/0x500 [ 1549.687708][T20644] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1549.691643][T20651] ? mempool_free+0x380/0x380 [ 1549.691652][T20651] ? mempool_alloc_slab+0x20/0x20 [ 1549.691659][T20651] mempool_init+0x35/0x50 [ 1549.691676][T20651] bioset_init+0x465/0x610 [ 1549.765537][T20651] blk_alloc_queue_node+0xc4/0x570 [ 1549.765551][T20651] blk_mq_init_queue+0x33/0xa0 [ 1549.775376][T20651] loop_add+0x256/0x710 [ 1549.779522][T20651] ? radix_tree_lookup+0x17a/0x1d0 [ 1549.784612][T20651] loop_control_ioctl+0x468/0x680 [ 1549.789604][T20651] ? xor_init+0x60/0x60 [ 1549.793728][T20651] do_vfs_ioctl+0x6fb/0x15b0 [ 1549.798303][T20651] __x64_sys_ioctl+0xd4/0x110 [ 1549.802952][T20651] do_syscall_64+0xcb/0x1e0 [ 1549.807435][T20651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1549.813300][T20651] RIP: 0033:0x7f2c46c0dae9 [ 1549.817690][T20651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.837265][T20651] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.845645][T20651] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1549.853586][T20651] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1549.861529][T20651] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.869476][T20651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.877420][T20651] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1549.889200][ T96] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1549.900115][ T96] Buffer I/O error on dev loop2, logical block 0, async page read [ 1549.908138][ T96] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1549.918989][ T96] Buffer I/O error on dev loop2, logical block 0, async page read [ 1549.924177][T20650] loop5: p2 < > p3 p4 [ 1549.926848][ T155] loop2: unable to read partition table [ 1549.931269][T20650] loop5: p2 size 2 extends beyond EOD, truncated [ 1549.943289][T20650] loop5: p3 start 225 is beyond EOD, truncated [ 1549.949464][T20650] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 14) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000200000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:55 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005006400000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800007a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1550.238079][T20660] FAULT_INJECTION: forcing a failure. [ 1550.238079][T20660] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.251431][T20660] CPU: 0 PID: 20660 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1550.261644][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.271704][T20660] Call Trace: [ 1550.274969][T20660] dump_stack+0x18e/0x1de [ 1550.279309][T20660] should_fail+0x5d8/0x740 18:21:55 executing program 5: syz_read_part_table(0x5, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1550.283696][T20660] ? mempool_alloc_slab+0x16/0x20 [ 1550.289729][T20660] should_failslab+0x5/0x20 [ 1550.294216][T20660] kmem_cache_alloc+0x36/0x290 [ 1550.298965][T20660] ? mempool_init+0x35/0x50 [ 1550.303447][T20660] mempool_alloc_slab+0x16/0x20 [ 1550.308265][T20660] ? mempool_free+0x380/0x380 [ 1550.312909][T20660] mempool_init_node+0x1f6/0x500 [ 1550.317813][T20660] ? mempool_free+0x380/0x380 [ 1550.322456][T20660] ? mempool_alloc_slab+0x20/0x20 [ 1550.327447][T20660] mempool_init+0x35/0x50 [ 1550.331745][T20660] bioset_init+0x465/0x610 [ 1550.336135][T20660] blk_alloc_queue_node+0xc4/0x570 [ 1550.341218][T20660] blk_mq_init_queue+0x33/0xa0 [ 1550.345946][T20660] loop_add+0x256/0x710 [ 1550.350070][T20660] ? radix_tree_lookup+0x17a/0x1d0 [ 1550.355182][T20660] loop_control_ioctl+0x468/0x680 [ 1550.360190][T20660] ? xor_init+0x60/0x60 [ 1550.364323][T20660] do_vfs_ioctl+0x6fb/0x15b0 [ 1550.368890][T20660] __x64_sys_ioctl+0xd4/0x110 [ 1550.373539][T20660] do_syscall_64+0xcb/0x1e0 [ 1550.378017][T20660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1550.383883][T20660] RIP: 0033:0x7f2c46c0dae9 [ 1550.388274][T20660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1550.407865][T20660] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.416244][T20660] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1550.424190][T20660] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1550.432134][T20660] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.440077][T20660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.448021][T20660] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:21:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 15) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1550.496446][T20656] loop3: p2 < > p3 p4 [ 1550.500662][T20656] loop3: p2 size 2 extends beyond EOD, truncated [ 1550.511056][T20656] loop3: p3 start 225 is beyond EOD, truncated [ 1550.517402][T20656] loop3: p4 start 9437184 is beyond EOD, truncated [ 1550.524545][T20664] loop2: p2 < > p3 p4 [ 1550.528720][T20664] loop2: p2 size 2 extends beyond EOD, truncated [ 1550.535515][T20664] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1550.543007][T20664] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:21:56 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00009a00008000da55aa", 0x40, 0x1c0}]) [ 1550.583863][T20666] loop1: p2 < > p3 p4 [ 1550.588210][T20666] loop1: partition table partially beyond EOD, truncated [ 1550.594720][ T155] loop2: p2 < > p3 p4 [ 1550.597732][T20666] loop1: p2 start 536870912 is beyond EOD, truncated [ 1550.599647][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1550.611944][T20666] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1550.615800][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1550.622233][T20666] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1550.631282][T20671] loop5: p2 < > p3 p4 [ 1550.637363][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1550.637826][T20671] loop5: p2 size 2 extends beyond EOD, truncated [ 1550.651543][T20671] loop5: p3 start 225 is beyond EOD, truncated [ 1550.657714][T20671] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1550.664095][T20678] loop4: p2 < > p3 p4 [ 1550.668951][T20678] loop4: partition table partially beyond EOD, truncated [ 1550.676150][T20678] loop4: p2 start 31232 is beyond EOD, truncated [ 1550.682503][T20678] loop4: p3 start 225 is beyond EOD, truncated [ 1550.688718][T20678] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1550.714144][T20682] FAULT_INJECTION: forcing a failure. [ 1550.714144][T20682] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.727592][T20682] CPU: 0 PID: 20682 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1550.737812][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.747889][T20682] Call Trace: [ 1550.751175][T20682] dump_stack+0x18e/0x1de [ 1550.751192][T20682] should_fail+0x5d8/0x740 [ 1550.759882][T20682] ? mempool_init_node+0x131/0x500 [ 1550.764965][T20682] should_failslab+0x5/0x20 [ 1550.769435][T20682] __kmalloc+0x5f/0x2f0 [ 1550.773557][T20682] ? mempool_init_node+0x131/0x500 [ 1550.778637][T20682] mempool_init_node+0x131/0x500 [ 1550.783544][T20682] ? mempool_free+0x380/0x380 [ 1550.788189][T20682] ? mempool_alloc_slab+0x20/0x20 [ 1550.793183][T20682] mempool_init+0x35/0x50 [ 1550.797481][T20682] bioset_init+0x4da/0x610 [ 1550.801865][T20682] blk_alloc_queue_node+0xc4/0x570 [ 1550.806943][T20682] blk_mq_init_queue+0x33/0xa0 [ 1550.811673][T20682] loop_add+0x256/0x710 [ 1550.815796][T20682] ? radix_tree_lookup+0x17a/0x1d0 [ 1550.820874][T20682] loop_control_ioctl+0x468/0x680 [ 1550.825870][T20682] ? xor_init+0x60/0x60 [ 1550.830012][T20682] do_vfs_ioctl+0x6fb/0x15b0 [ 1550.834576][T20682] __x64_sys_ioctl+0xd4/0x110 [ 1550.839222][T20682] do_syscall_64+0xcb/0x1e0 [ 1550.843698][T20682] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1550.849559][T20682] RIP: 0033:0x7f2c46c0dae9 [ 1550.853941][T20682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1550.873510][T20682] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.881890][T20682] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1550.889834][T20682] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1550.897824][T20682] RBP: 00007f2c449631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.905771][T20682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.913718][T20682] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 18:21:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 16) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:56 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005079600000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000250000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1551.074456][T20680] loop3: p2 < > p3 p4 [ 1551.085917][T20680] loop3: p2 size 2 extends beyond EOD, truncated [ 1551.092692][T20680] loop3: p3 start 225 is beyond EOD, truncated [ 1551.099031][T20680] loop3: p4 start 10092544 is beyond EOD, truncated [ 1551.152606][T20671] loop5: p2 < > p3 p4 [ 1551.156899][T20671] loop5: p2 size 2 extends beyond EOD, truncated [ 1551.163956][T20671] loop5: p3 start 225 is beyond EOD, truncated [ 1551.170089][T20671] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1551.184214][T20687] FAULT_INJECTION: forcing a failure. [ 1551.184214][T20687] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.196824][T20687] CPU: 1 PID: 20687 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1551.207089][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.217151][T20687] Call Trace: [ 1551.220419][T20687] dump_stack+0x18e/0x1de [ 1551.224721][T20687] should_fail+0x5d8/0x740 [ 1551.229110][T20687] ? mempool_alloc_slab+0x16/0x20 [ 1551.234102][T20687] should_failslab+0x5/0x20 [ 1551.238576][T20687] kmem_cache_alloc+0x36/0x290 [ 1551.243310][T20687] ? __kmalloc+0x174/0x2f0 [ 1551.247694][T20687] ? mempool_init_node+0x131/0x500 [ 1551.252772][T20687] mempool_alloc_slab+0x16/0x20 [ 1551.257589][T20687] ? mempool_free+0x380/0x380 [ 1551.262233][T20687] mempool_init_node+0x1f6/0x500 [ 1551.267142][T20687] ? mempool_free+0x380/0x380 [ 1551.271784][T20687] ? mempool_alloc_slab+0x20/0x20 [ 1551.276774][T20687] mempool_init+0x35/0x50 [ 1551.281071][T20687] bioset_init+0x4da/0x610 [ 1551.285456][T20687] blk_alloc_queue_node+0xc4/0x570 [ 1551.290535][T20687] blk_mq_init_queue+0x33/0xa0 [ 1551.295265][T20687] loop_add+0x256/0x710 [ 1551.299390][T20687] ? radix_tree_lookup+0x17a/0x1d0 [ 1551.304469][T20687] loop_control_ioctl+0x468/0x680 [ 1551.309462][T20687] ? xor_init+0x60/0x60 [ 1551.313586][T20687] do_vfs_ioctl+0x6fb/0x15b0 [ 1551.318150][T20687] __x64_sys_ioctl+0xd4/0x110 [ 1551.322797][T20687] do_syscall_64+0xcb/0x1e0 [ 1551.327269][T20687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1551.333129][T20687] RIP: 0033:0x7f2c46c0dae9 [ 1551.337514][T20687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.357088][T20687] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.365469][T20687] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1551.373411][T20687] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1551.381349][T20687] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.389286][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:21:56 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000c100008000da55aa", 0x40, 0x1c0}]) 18:21:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800009000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 17) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:56 executing program 5: syz_read_part_table(0x6, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1551.397226][T20687] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1551.411211][ T155] loop5: p2 < > p3 p4 [ 1551.415428][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1551.424926][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1551.431100][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1551.465058][T20689] loop2: p2 < > p3 p4 [ 1551.469293][T20689] loop2: p2 size 2 extends beyond EOD, truncated [ 1551.476171][T20689] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1551.483685][T20689] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1551.534788][T20697] FAULT_INJECTION: forcing a failure. [ 1551.534788][T20697] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.547438][T20697] CPU: 0 PID: 20697 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1551.557648][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.567677][T20697] Call Trace: [ 1551.570946][T20697] dump_stack+0x18e/0x1de [ 1551.575252][T20697] should_fail+0x5d8/0x740 [ 1551.579641][T20697] ? mempool_alloc_slab+0x16/0x20 [ 1551.584636][T20697] should_failslab+0x5/0x20 [ 1551.589113][T20697] kmem_cache_alloc+0x36/0x290 [ 1551.593849][T20697] ? mempool_init+0x35/0x50 [ 1551.598323][T20697] mempool_alloc_slab+0x16/0x20 [ 1551.603145][T20697] ? mempool_free+0x380/0x380 [ 1551.607792][T20697] mempool_init_node+0x1f6/0x500 [ 1551.612704][T20697] ? mempool_free+0x380/0x380 [ 1551.617353][T20697] ? mempool_alloc_slab+0x20/0x20 [ 1551.622346][T20697] mempool_init+0x35/0x50 [ 1551.626669][T20697] bioset_init+0x4da/0x610 [ 1551.631065][T20697] blk_alloc_queue_node+0xc4/0x570 [ 1551.636150][T20697] blk_mq_init_queue+0x33/0xa0 [ 1551.640886][T20697] loop_add+0x256/0x710 [ 1551.645013][T20697] ? radix_tree_lookup+0x17a/0x1d0 [ 1551.650095][T20697] loop_control_ioctl+0x468/0x680 [ 1551.655091][T20697] ? xor_init+0x60/0x60 [ 1551.659220][T20697] do_vfs_ioctl+0x6fb/0x15b0 [ 1551.663784][T20697] __x64_sys_ioctl+0xd4/0x110 [ 1551.668434][T20697] do_syscall_64+0xcb/0x1e0 [ 1551.672918][T20697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1551.678780][T20697] RIP: 0033:0x7f2c46c0dae9 [ 1551.683168][T20697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.702740][T20697] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.711122][T20697] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1551.719064][T20697] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1551.727005][T20697] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.734950][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.742893][T20697] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:21:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 18) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1551.813674][T20703] loop1: p2 < > p3 p4 [ 1551.817856][T20703] loop1: partition table partially beyond EOD, truncated [ 1551.825529][T20703] loop1: p2 start 620756992 is beyond EOD, truncated [ 1551.832272][T20703] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1551.839893][T20703] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1551.905148][T20695] loop3: p2 < > p3 p4 [ 1551.909320][T20695] loop3: p2 size 2 extends beyond EOD, truncated [ 1551.916304][T20695] loop3: p3 start 225 is beyond EOD, truncated [ 1551.922459][T20695] loop3: p4 start 12648448 is beyond EOD, truncated 18:21:57 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005079f00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1552.123572][T20713] FAULT_INJECTION: forcing a failure. [ 1552.123572][T20713] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.127325][T20708] loop5: p2 < > p3 p4 [ 1552.136201][T20713] CPU: 1 PID: 20713 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1552.136207][T20713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.136216][T20713] Call Trace: [ 1552.140526][T20708] loop5: p2 size 2 extends beyond EOD, truncated 18:21:57 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000e100008000da55aa", 0x40, 0x1c0}]) [ 1552.150472][T20713] dump_stack+0x18e/0x1de [ 1552.150486][T20713] should_fail+0x5d8/0x740 [ 1552.150497][T20713] ? mempool_alloc_slab+0x16/0x20 [ 1552.150506][T20713] should_failslab+0x5/0x20 [ 1552.150514][T20713] kmem_cache_alloc+0x36/0x290 [ 1552.150527][T20713] ? __kmalloc+0x174/0x2f0 [ 1552.162184][T20705] loop4: p2 < > p3 p4 [ 1552.163817][T20713] ? mempool_init_node+0x131/0x500 [ 1552.163828][T20713] mempool_alloc_slab+0x16/0x20 [ 1552.163836][T20713] ? mempool_free+0x380/0x380 [ 1552.163849][T20713] mempool_init_node+0x1f6/0x500 [ 1552.163859][T20713] ? mempool_free+0x380/0x380 [ 1552.163872][T20713] ? mempool_alloc_slab+0x20/0x20 [ 1552.170459][T20705] loop4: partition table partially beyond EOD, truncated [ 1552.174471][T20713] mempool_init+0x35/0x50 [ 1552.174483][T20713] bioset_init+0x4da/0x610 [ 1552.174497][T20713] blk_alloc_queue_node+0xc4/0x570 [ 1552.174507][T20713] blk_mq_init_queue+0x33/0xa0 [ 1552.174520][T20713] loop_add+0x256/0x710 [ 1552.179204][T20705] loop4: p2 start 36864 is beyond EOD, truncated [ 1552.183895][T20713] ? radix_tree_lookup+0x17a/0x1d0 18:21:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000003f0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1552.183906][T20713] loop_control_ioctl+0x468/0x680 [ 1552.183914][T20713] ? xor_init+0x60/0x60 [ 1552.183924][T20713] do_vfs_ioctl+0x6fb/0x15b0 [ 1552.183939][T20713] __x64_sys_ioctl+0xd4/0x110 [ 1552.189587][T20705] loop4: p3 start 225 is beyond EOD, truncated [ 1552.193146][T20713] do_syscall_64+0xcb/0x1e0 [ 1552.193158][T20713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1552.193166][T20713] RIP: 0033:0x7f2c46c0dae9 [ 1552.193174][T20713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.193178][T20713] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.198005][T20705] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1552.201604][T20713] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1552.201609][T20713] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1552.201614][T20713] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 18:21:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 19) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1552.201619][T20713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.201624][T20713] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1552.221507][T20708] loop5: p3 start 225 is beyond EOD, truncated [ 1552.392162][T20708] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:21:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800009a00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1552.435137][ T155] loop2: p2 < > p3 p4 [ 1552.439382][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1552.446402][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1552.453944][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1552.462597][T20717] loop2: p2 < > p3 p4 [ 1552.466803][T20717] loop2: p2 size 2 extends beyond EOD, truncated [ 1552.473764][T20717] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1552.481245][T20717] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1552.663768][T20723] FAULT_INJECTION: forcing a failure. [ 1552.663768][T20723] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.665536][T20721] loop3: p2 < > p3 p4 [ 1552.676406][T20723] CPU: 1 PID: 20723 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1552.676417][T20723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.680777][T20721] loop3: p2 size 2 extends beyond EOD, truncated [ 1552.690663][T20723] Call Trace: [ 1552.690677][T20723] dump_stack+0x18e/0x1de [ 1552.690690][T20723] should_fail+0x5d8/0x740 [ 1552.690700][T20723] ? bdi_init+0x196/0x940 [ 1552.690709][T20723] should_failslab+0x5/0x20 [ 1552.690723][T20723] kmem_cache_alloc_trace+0x39/0x2b0 [ 1552.705197][T20721] loop3: p3 start 225 is beyond EOD, truncated [ 1552.707044][T20723] ? bdi_alloc_node+0x76/0xc0 [ 1552.707054][T20723] bdi_init+0x196/0x940 [ 1552.707061][T20723] ? bdi_alloc_node+0x76/0xc0 [ 1552.707072][T20723] bdi_alloc_node+0x86/0xc0 [ 1552.710444][T20721] loop3: p4 start 14745600 is beyond EOD, truncated [ 1552.714623][T20723] blk_alloc_queue_node+0x10b/0x570 [ 1552.714635][T20723] blk_mq_init_queue+0x33/0xa0 [ 1552.714644][T20723] loop_add+0x256/0x710 [ 1552.714653][T20723] ? radix_tree_lookup+0x17a/0x1d0 [ 1552.714665][T20723] loop_control_ioctl+0x468/0x680 [ 1552.787715][T20723] ? xor_init+0x60/0x60 [ 1552.791843][T20723] do_vfs_ioctl+0x6fb/0x15b0 [ 1552.796404][T20723] __x64_sys_ioctl+0xd4/0x110 [ 1552.801051][T20723] do_syscall_64+0xcb/0x1e0 [ 1552.805530][T20723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1552.811396][T20723] RIP: 0033:0x7f2c46c0dae9 [ 1552.815779][T20723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.835351][T20723] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.843727][T20723] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1552.851669][T20723] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 18:21:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 20) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:58 executing program 5: syz_read_part_table(0x7, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1552.859608][T20723] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.867546][T20723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.875485][T20723] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1552.914528][T20730] loop1: p2 < > p3 p4 [ 1552.918656][T20730] loop1: partition table partially beyond EOD, truncated [ 1552.925802][T20730] loop1: p2 start 1056964608 is beyond EOD, truncated [ 1552.932576][T20730] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1552.940131][T20730] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1552.963883][T20836] FAULT_INJECTION: forcing a failure. [ 1552.963883][T20836] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.976631][T20836] CPU: 1 PID: 20836 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1552.986839][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.996904][T20836] Call Trace: [ 1553.000209][T20836] dump_stack+0x18e/0x1de [ 1553.004514][T20836] should_fail+0x5d8/0x740 [ 1553.008920][T20836] ? __percpu_counter_init+0x1aa/0x1e0 [ 1553.008936][T20836] ? blk_alloc_queue_stats+0x48/0x100 [ 1553.019706][T20836] should_failslab+0x5/0x20 [ 1553.024181][T20836] kmem_cache_alloc_trace+0x39/0x2b0 [ 1553.029435][T20836] blk_alloc_queue_stats+0x48/0x100 [ 1553.034601][T20836] blk_alloc_queue_node+0x14d/0x570 [ 1553.039783][T20836] blk_mq_init_queue+0x33/0xa0 [ 1553.044520][T20836] loop_add+0x256/0x710 [ 1553.048644][T20836] ? radix_tree_lookup+0x17a/0x1d0 [ 1553.053728][T20836] loop_control_ioctl+0x468/0x680 [ 1553.058739][T20836] ? xor_init+0x60/0x60 [ 1553.062873][T20836] do_vfs_ioctl+0x6fb/0x15b0 [ 1553.067442][T20836] __x64_sys_ioctl+0xd4/0x110 [ 1553.072092][T20836] do_syscall_64+0xcb/0x1e0 [ 1553.076574][T20836] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1553.082489][T20836] RIP: 0033:0x7f2c46c0dae9 [ 1553.086872][T20836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.106444][T20836] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.114826][T20836] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1553.122767][T20836] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1553.130706][T20836] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.138820][T20836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1553.146761][T20836] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:21:58 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000402008000da55aa", 0x40, 0x1c0}]) 18:21:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 21) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:58 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000507a600000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000400000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1553.391466][T20840] loop5: p2 < > p3 p4 [ 1553.395702][T20840] loop5: p2 size 2 extends beyond EOD, truncated [ 1553.402498][T20840] loop5: p3 start 225 is beyond EOD, truncated [ 1553.408847][T20840] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1553.416441][T20843] loop4: p2 < > p3 p4 [ 1553.417251][T20847] FAULT_INJECTION: forcing a failure. [ 1553.417251][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.420604][T20843] loop4: partition table partially beyond EOD, truncated [ 1553.433126][T20847] CPU: 0 PID: 20847 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1553.440336][T20843] loop4: p2 start 39424 is beyond EOD, truncated [ 1553.450304][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.450307][T20847] Call Trace: [ 1553.450323][T20847] dump_stack+0x18e/0x1de [ 1553.450335][T20847] should_fail+0x5d8/0x740 [ 1553.450345][T20847] ? blk_stat_alloc_callback+0x5c/0x210 [ 1553.450359][T20847] should_failslab+0x5/0x20 [ 1553.456734][T20843] loop4: p3 start 225 is beyond EOD, truncated [ 1553.466684][T20847] kmem_cache_alloc_trace+0x39/0x2b0 [ 1553.466696][T20847] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1553.466702][T20847] ? blk_mq_free_tag_set+0x470/0x470 [ 1553.466710][T20847] blk_stat_alloc_callback+0x5c/0x210 [ 1553.466722][T20847] blk_mq_init_allocated_queue+0x86/0x16e0 [ 1553.470038][T20843] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1553.474275][T20847] ? blk_timeout_work+0x10/0x10 [ 1553.474287][T20847] ? blk_alloc_queue_node+0x4e0/0x570 [ 1553.474296][T20847] blk_mq_init_queue+0x48/0xa0 [ 1553.474310][T20847] loop_add+0x256/0x710 [ 1553.547798][T20847] ? radix_tree_lookup+0x17a/0x1d0 [ 1553.552880][T20847] loop_control_ioctl+0x468/0x680 [ 1553.557873][T20847] ? xor_init+0x60/0x60 [ 1553.562000][T20847] do_vfs_ioctl+0x6fb/0x15b0 [ 1553.566560][T20847] __x64_sys_ioctl+0xd4/0x110 [ 1553.571206][T20847] do_syscall_64+0xcb/0x1e0 [ 1553.575676][T20847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1553.581534][T20847] RIP: 0033:0x7f2c46c0dae9 [ 1553.585918][T20847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.605489][T20847] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.613869][T20847] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1553.621811][T20847] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1553.629751][T20847] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 18:21:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 22) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1553.637734][T20847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1553.645673][T20847] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1553.667416][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1553.667472][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1553.686932][ T155] loop4: p2 < > p3 p4 [ 1553.691113][ T155] loop4: partition table partially beyond EOD, truncated [ 1553.698450][ T155] loop4: p2 start 39424 is beyond EOD, truncated [ 1553.704880][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1553.711062][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1553.719348][T20849] loop3: p2 < > p3 p4 [ 1553.723540][T20849] loop3: p2 size 2 extends beyond EOD, truncated [ 1553.730410][T20849] loop3: p3 start 225 is beyond EOD, truncated 18:21:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000a600000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1553.736723][T20849] loop3: p4 start 33816576 is beyond EOD, truncated [ 1553.763892][T20856] loop2: p2 < > p3 p4 [ 1553.768057][T20856] loop2: p2 size 2 extends beyond EOD, truncated [ 1553.774923][T20856] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1553.782451][T20856] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1553.844339][T20863] FAULT_INJECTION: forcing a failure. [ 1553.844339][T20863] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.844535][T20840] loop5: p2 < > p3 p4 [ 1553.856966][T20863] CPU: 1 PID: 20863 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1553.856970][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.856973][T20863] Call Trace: [ 1553.856987][T20863] dump_stack+0x18e/0x1de [ 1553.857000][T20863] should_fail+0x5d8/0x740 [ 1553.857011][T20863] ? blk_stat_alloc_callback+0x5c/0x210 [ 1553.857022][T20863] should_failslab+0x5/0x20 [ 1553.857031][T20863] kmem_cache_alloc_trace+0x39/0x2b0 [ 1553.857045][T20863] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1553.861671][T20840] loop5: p2 size 2 extends beyond EOD, truncated [ 1553.871291][T20863] ? blk_mq_free_tag_set+0x470/0x470 [ 1553.871301][T20863] blk_stat_alloc_callback+0x5c/0x210 [ 1553.871312][T20863] blk_mq_init_allocated_queue+0x86/0x16e0 [ 1553.871321][T20863] ? blk_timeout_work+0x10/0x10 [ 1553.871335][T20863] ? blk_alloc_queue_node+0x4e0/0x570 [ 1553.883344][T20840] loop5: p3 start 225 is beyond EOD, truncated [ 1553.884620][T20863] blk_mq_init_queue+0x48/0xa0 [ 1553.884629][T20863] loop_add+0x256/0x710 [ 1553.884643][T20863] ? radix_tree_lookup+0x17a/0x1d0 [ 1553.888997][T20840] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1553.893329][T20863] loop_control_ioctl+0x468/0x680 [ 1553.893338][T20863] ? xor_init+0x60/0x60 [ 1553.893348][T20863] do_vfs_ioctl+0x6fb/0x15b0 [ 1553.893364][T20863] __x64_sys_ioctl+0xd4/0x110 [ 1553.992233][T20863] do_syscall_64+0xcb/0x1e0 [ 1553.996707][T20863] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1554.002574][T20863] RIP: 0033:0x7f2c46c0dae9 [ 1554.006957][T20863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.026526][T20863] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.034902][T20863] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1554.042843][T20863] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1554.050780][T20863] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.058723][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1554.066708][T20863] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:21:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 23) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:21:59 executing program 5: syz_read_part_table(0x8, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:21:59 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000003008000da55aa", 0x40, 0x1c0}]) [ 1554.186337][ T155] loop5: p2 < > p3 p4 [ 1554.190549][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1554.197732][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1554.204020][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1554.225813][T20864] loop1: p2 < > p3 p4 [ 1554.229904][T20864] loop1: partition table partially beyond EOD, truncated [ 1554.237226][T20864] loop1: p2 start 1073741824 is beyond EOD, truncated [ 1554.244154][T20864] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1554.251682][T20864] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1554.276124][T20872] FAULT_INJECTION: forcing a failure. [ 1554.276124][T20872] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.281597][T20867] loop4: p2 < > p3 p4 [ 1554.288766][T20872] CPU: 1 PID: 20872 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1554.292809][T20867] loop4: partition table partially beyond EOD, truncated [ 1554.302997][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.303000][T20872] Call Trace: [ 1554.303015][T20872] dump_stack+0x18e/0x1de [ 1554.303027][T20872] should_fail+0x5d8/0x740 18:21:59 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000507ad00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1554.303037][T20872] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1554.303050][T20872] ? blk_stat_alloc_callback+0x95/0x210 [ 1554.310813][T20867] loop4: p2 start 42496 is beyond EOD, truncated [ 1554.320062][T20872] should_failslab+0x5/0x20 [ 1554.320072][T20872] __kmalloc+0x5f/0x2f0 [ 1554.320079][T20872] ? blk_stat_alloc_callback+0x5c/0x210 [ 1554.320091][T20872] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1554.323784][T20867] loop4: p3 start 225 is beyond EOD, truncated [ 1554.327657][T20872] ? blk_mq_free_tag_set+0x470/0x470 [ 1554.332042][T20867] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1554.337383][T20872] blk_stat_alloc_callback+0x95/0x210 [ 1554.337392][T20872] ? blk_mq_free_tag_set+0x470/0x470 [ 1554.337399][T20872] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1554.337407][T20872] blk_mq_init_allocated_queue+0x86/0x16e0 [ 1554.337417][T20872] ? blk_timeout_work+0x10/0x10 [ 1554.337426][T20872] ? blk_alloc_queue_node+0x4e0/0x570 [ 1554.337438][T20872] blk_mq_init_queue+0x48/0xa0 [ 1554.423763][T20872] loop_add+0x256/0x710 [ 1554.427891][T20872] ? radix_tree_lookup+0x17a/0x1d0 [ 1554.432969][T20872] loop_control_ioctl+0x468/0x680 [ 1554.437961][T20872] ? xor_init+0x60/0x60 [ 1554.442085][T20872] do_vfs_ioctl+0x6fb/0x15b0 [ 1554.446646][T20872] __x64_sys_ioctl+0xd4/0x110 [ 1554.451287][T20872] do_syscall_64+0xcb/0x1e0 [ 1554.455781][T20872] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1554.461654][T20872] RIP: 0033:0x7f2c46c0dae9 [ 1554.466042][T20872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.485616][T20872] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.493995][T20872] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1554.501939][T20872] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1554.509888][T20872] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.517841][T20872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1554.525796][T20872] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000480000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 24) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1554.704899][T20877] loop3: p2 < > p3 p4 [ 1554.705305][ T155] loop4: p2 < > p3 p4 [ 1554.709120][T20877] loop3: p2 size 2 extends beyond EOD, truncated [ 1554.713076][ T155] loop4: partition table partially beyond EOD, truncated [ 1554.719967][T20877] loop3: p3 start 225 is beyond EOD, truncated [ 1554.726923][ T155] loop4: p2 start 42496 is beyond EOD, truncated [ 1554.733501][T20877] loop3: p4 start 50331648 is beyond EOD, truncated [ 1554.739233][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1554.751683][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1554.808067][T20880] loop5: p2 < > p3 p4 [ 1554.812273][T20880] loop5: p2 size 2 extends beyond EOD, truncated [ 1554.819065][T20880] loop5: p3 start 225 is beyond EOD, truncated [ 1554.825381][T20880] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1554.874310][T20881] loop2: p2 < > p3 p4 [ 1554.875460][T20885] FAULT_INJECTION: forcing a failure. [ 1554.875460][T20885] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.878514][T20881] loop2: p2 size 2 extends beyond EOD, truncated [ 1554.891024][T20885] CPU: 0 PID: 20885 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1554.891030][T20885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.891032][T20885] Call Trace: 18:22:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000a800000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1554.891047][T20885] dump_stack+0x18e/0x1de [ 1554.891061][T20885] should_fail+0x5d8/0x740 [ 1554.891072][T20885] ? blk_mq_init_allocated_queue+0xf0/0x16e0 [ 1554.891083][T20885] should_failslab+0x5/0x20 [ 1554.891097][T20885] kmem_cache_alloc_trace+0x39/0x2b0 [ 1554.898646][T20881] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1554.907599][T20885] ? blk_stat_alloc_callback+0x1a4/0x210 [ 1554.907608][T20885] ? blk_mq_free_tag_set+0x470/0x470 [ 1554.907615][T20885] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1554.907624][T20885] blk_mq_init_allocated_queue+0xf0/0x16e0 [ 1554.907639][T20885] ? blk_alloc_queue_node+0x4e0/0x570 [ 1554.918604][T20881] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1554.920926][T20885] blk_mq_init_queue+0x48/0xa0 [ 1554.920941][T20885] loop_add+0x256/0x710 [ 1554.995616][T20885] ? radix_tree_lookup+0x17a/0x1d0 [ 1555.000741][T20885] loop_control_ioctl+0x468/0x680 [ 1555.005740][T20885] ? xor_init+0x60/0x60 [ 1555.009895][T20885] do_vfs_ioctl+0x6fb/0x15b0 [ 1555.014465][T20885] __x64_sys_ioctl+0xd4/0x110 [ 1555.019117][T20885] do_syscall_64+0xcb/0x1e0 [ 1555.023591][T20885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1555.029471][T20885] RIP: 0033:0x7f2c46c0dae9 [ 1555.033855][T20885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.053432][T20885] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.061813][T20885] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1555.069755][T20885] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1555.077696][T20885] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.085636][T20885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.093577][T20885] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 25) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:00 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000de03008000da55aa", 0x40, 0x1c0}]) [ 1555.306402][T20894] FAULT_INJECTION: forcing a failure. [ 1555.306402][T20894] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.306601][T20880] loop5: p2 < > p3 p4 [ 1555.319052][T20894] CPU: 1 PID: 20894 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1555.319057][T20894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.319060][T20894] Call Trace: [ 1555.319079][T20894] dump_stack+0x18e/0x1de [ 1555.319096][T20894] should_fail+0x5d8/0x740 [ 1555.327447][T20880] loop5: p2 size 2 extends beyond EOD, truncated [ 1555.333373][T20894] ? blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 1555.333384][T20894] should_failslab+0x5/0x20 [ 1555.333392][T20894] __kmalloc+0x5f/0x2f0 [ 1555.333406][T20894] ? _raw_spin_lock+0x6c/0x170 [ 1555.344580][T20880] loop5: p3 start 225 is beyond EOD, truncated [ 1555.346694][T20894] blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 1555.346711][T20894] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 1555.351037][T20880] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1555.355396][T20894] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1555.355408][T20894] ? blk_alloc_queue_node+0x4e0/0x570 [ 1555.355421][T20894] blk_mq_init_queue+0x48/0xa0 [ 1555.420217][T20894] loop_add+0x256/0x710 [ 1555.424344][T20894] ? radix_tree_lookup+0x17a/0x1d0 [ 1555.429428][T20894] loop_control_ioctl+0x468/0x680 [ 1555.434423][T20894] ? xor_init+0x60/0x60 [ 1555.438550][T20894] do_vfs_ioctl+0x6fb/0x15b0 [ 1555.443125][T20894] __x64_sys_ioctl+0xd4/0x110 [ 1555.447774][T20894] do_syscall_64+0xcb/0x1e0 [ 1555.452252][T20894] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1555.458113][T20894] RIP: 0033:0x7f2c46c0dae9 [ 1555.462503][T20894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.482078][T20894] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.490457][T20894] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1555.498401][T20894] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1555.506342][T20894] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.514285][T20894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.522229][T20894] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:01 executing program 5: syz_read_part_table(0x9, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:01 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000507f200000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 26) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1555.605221][T20890] loop1: p2 < > p3 p4 [ 1555.609550][T20890] loop1: partition table partially beyond EOD, truncated [ 1555.616923][T20890] loop1: p2 start 1207959552 is beyond EOD, truncated [ 1555.623757][T20890] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1555.631233][T20890] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:22:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000004c480000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1555.690690][T20896] loop3: p2 < > p3 p4 [ 1555.696409][T20896] loop3: p2 size 2 extends beyond EOD, truncated [ 1555.703670][T20896] loop3: p3 start 225 is beyond EOD, truncated [ 1555.709834][T20896] loop3: p4 start 64880640 is beyond EOD, truncated [ 1555.740707][T20900] loop4: p2 < > p3 p4 [ 1555.744861][T20900] loop4: partition table partially beyond EOD, truncated [ 1555.751956][T20900] loop4: p2 start 43008 is beyond EOD, truncated [ 1555.758445][T20900] loop4: p3 start 225 is beyond EOD, truncated [ 1555.764755][T20900] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1555.793931][T20908] FAULT_INJECTION: forcing a failure. [ 1555.793931][T20908] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.806549][T20908] CPU: 1 PID: 20908 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1555.816762][T20908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.816766][T20908] Call Trace: [ 1555.816789][T20908] dump_stack+0x18e/0x1de [ 1555.834395][T20908] should_fail+0x5d8/0x740 [ 1555.838790][T20908] ? blk_mq_realloc_hw_ctxs+0x637/0x1440 [ 1555.844397][T20908] should_failslab+0x5/0x20 [ 1555.848879][T20908] __kmalloc+0x5f/0x2f0 [ 1555.853005][T20908] ? blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 1555.858620][T20908] ? _raw_spin_lock+0x6c/0x170 [ 1555.863359][T20908] blk_mq_realloc_hw_ctxs+0x637/0x1440 [ 1555.868794][T20908] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1555.874665][T20908] ? blk_alloc_queue_node+0x4e0/0x570 [ 1555.880015][T20908] blk_mq_init_queue+0x48/0xa0 [ 1555.884750][T20908] loop_add+0x256/0x710 [ 1555.888875][T20908] ? radix_tree_lookup+0x17a/0x1d0 [ 1555.893953][T20908] loop_control_ioctl+0x468/0x680 [ 1555.898950][T20908] ? xor_init+0x60/0x60 [ 1555.903089][T20908] do_vfs_ioctl+0x6fb/0x15b0 [ 1555.907664][T20908] __x64_sys_ioctl+0xd4/0x110 [ 1555.912312][T20908] do_syscall_64+0xcb/0x1e0 [ 1555.916792][T20908] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1555.922656][T20908] RIP: 0033:0x7f2c46c0dae9 [ 1555.927051][T20908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.946627][T20908] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.955011][T20908] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1555.962955][T20908] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1555.970898][T20908] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.978842][T20908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.986785][T20908] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 27) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:01 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000e003008000da55aa", 0x40, 0x1c0}]) [ 1556.015095][ T155] loop4: p2 < > p3 p4 [ 1556.019289][ T155] loop4: partition table partially beyond EOD, truncated [ 1556.026489][ T155] loop4: p2 start 43008 is beyond EOD, truncated [ 1556.026494][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1556.026499][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1556.054398][T20907] loop2: p2 < > p3 p4 [ 1556.058634][T20907] loop2: p2 size 2 extends beyond EOD, truncated [ 1556.066693][T20907] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1556.074277][T20907] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1556.094259][T20912] loop5: p2 < > p3 p4 [ 1556.098455][T20912] loop5: p2 size 2 extends beyond EOD, truncated [ 1556.105476][T20912] loop5: p3 start 225 is beyond EOD, truncated [ 1556.111658][T20912] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1556.133729][T20916] loop1: p2 < > p3 p4 [ 1556.137927][T20916] loop1: partition table partially beyond EOD, truncated [ 1556.145337][T20916] loop1: p2 start 1212940288 is beyond EOD, truncated [ 1556.152182][T20916] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1556.159903][T20916] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1556.256069][T20924] FAULT_INJECTION: forcing a failure. [ 1556.256069][T20924] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.268794][T20924] CPU: 0 PID: 20924 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1556.268805][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.289046][T20924] Call Trace: [ 1556.292313][T20924] dump_stack+0x18e/0x1de [ 1556.296625][T20924] should_fail+0x5d8/0x740 [ 1556.301029][T20924] ? sbitmap_init_node+0x145/0x3d0 [ 1556.306115][T20924] should_failslab+0x5/0x20 [ 1556.310583][T20924] __kmalloc+0x5f/0x2f0 [ 1556.314711][T20924] sbitmap_init_node+0x145/0x3d0 [ 1556.319627][T20924] blk_mq_realloc_hw_ctxs+0x6a1/0x1440 [ 1556.325076][T20924] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1556.330951][T20924] ? blk_alloc_queue_node+0x4e0/0x570 [ 1556.336292][T20924] blk_mq_init_queue+0x48/0xa0 [ 1556.341024][T20924] loop_add+0x256/0x710 [ 1556.345149][T20924] ? radix_tree_lookup+0x17a/0x1d0 [ 1556.350234][T20924] loop_control_ioctl+0x468/0x680 [ 1556.355230][T20924] ? xor_init+0x60/0x60 [ 1556.359353][T20924] do_vfs_ioctl+0x6fb/0x15b0 [ 1556.363914][T20924] __x64_sys_ioctl+0xd4/0x110 [ 1556.368559][T20924] do_syscall_64+0xcb/0x1e0 [ 1556.373064][T20924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1556.378925][T20924] RIP: 0033:0x7f2c46c0dae9 [ 1556.383344][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.402918][T20924] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.411298][T20924] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1556.419242][T20924] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1556.427217][T20924] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.435157][T20924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.443094][T20924] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 28) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:02 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000507f500000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000ac00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000004c0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1556.575889][T20925] loop3: p2 < > p3 p4 [ 1556.580078][T20925] loop3: p2 size 2 extends beyond EOD, truncated [ 1556.600378][T20925] loop3: p3 start 225 is beyond EOD, truncated [ 1556.608875][T20925] loop3: p4 start 65011712 is beyond EOD, truncated [ 1556.618038][T20930] FAULT_INJECTION: forcing a failure. [ 1556.618038][T20930] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.622106][T20912] loop5: p2 < > p3 p4 [ 1556.630652][T20930] CPU: 0 PID: 20930 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1556.630658][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.630661][T20930] Call Trace: [ 1556.630676][T20930] dump_stack+0x18e/0x1de [ 1556.630690][T20930] should_fail+0x5d8/0x740 [ 1556.630701][T20930] ? blk_alloc_flush_queue+0x7e/0x230 [ 1556.630712][T20930] should_failslab+0x5/0x20 [ 1556.630722][T20930] kmem_cache_alloc_trace+0x39/0x2b0 [ 1556.630732][T20930] blk_alloc_flush_queue+0x7e/0x230 [ 1556.630742][T20930] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 1556.630759][T20930] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1556.630769][T20930] ? blk_alloc_queue_node+0x4e0/0x570 [ 1556.630782][T20930] blk_mq_init_queue+0x48/0xa0 [ 1556.708630][T20930] loop_add+0x256/0x710 [ 1556.712761][T20930] ? radix_tree_lookup+0x17a/0x1d0 [ 1556.717843][T20930] loop_control_ioctl+0x468/0x680 [ 1556.722837][T20930] ? xor_init+0x60/0x60 [ 1556.726962][T20930] do_vfs_ioctl+0x6fb/0x15b0 [ 1556.731527][T20930] __x64_sys_ioctl+0xd4/0x110 [ 1556.736176][T20930] do_syscall_64+0xcb/0x1e0 [ 1556.740660][T20930] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1556.746523][T20930] RIP: 0033:0x7f2c46c0dae9 [ 1556.750910][T20930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.770486][T20930] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.778866][T20930] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1556.786809][T20930] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1556.794750][T20930] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.802694][T20930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.810647][T20930] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1556.819449][T20912] loop5: p2 size 2 extends beyond EOD, truncated 18:22:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 29) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:02 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000204008000da55aa", 0x40, 0x1c0}]) [ 1556.826804][T20912] loop5: p3 start 225 is beyond EOD, truncated [ 1556.833047][T20912] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1556.846061][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1556.904021][T20934] loop2: p2 < > p3 p4 [ 1556.908243][T20934] loop2: p2 size 2 extends beyond EOD, truncated [ 1556.915451][T20934] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1556.923072][T20934] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:02 executing program 5: syz_read_part_table(0xa, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1556.955270][T20941] FAULT_INJECTION: forcing a failure. [ 1556.955270][T20941] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.962027][ T155] loop5: p2 < > p3 p4 [ 1556.968575][T20941] CPU: 0 PID: 20941 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1556.972384][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1556.982170][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.982174][T20941] Call Trace: [ 1556.982189][T20941] dump_stack+0x18e/0x1de [ 1556.982202][T20941] should_fail+0x5d8/0x740 [ 1556.982212][T20941] ? blk_alloc_flush_queue+0xdf/0x230 [ 1556.982227][T20941] should_failslab+0x5/0x20 [ 1556.989285][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1556.998551][T20941] __kmalloc+0x5f/0x2f0 [ 1556.998561][T20941] ? blk_alloc_flush_queue+0x7e/0x230 [ 1556.998571][T20941] blk_alloc_flush_queue+0xdf/0x230 [ 1556.998581][T20941] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 1556.998597][T20941] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1557.002000][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1557.006236][T20941] ? blk_alloc_queue_node+0x4e0/0x570 [ 1557.006247][T20941] blk_mq_init_queue+0x48/0xa0 [ 1557.006255][T20941] loop_add+0x256/0x710 [ 1557.006264][T20941] ? radix_tree_lookup+0x17a/0x1d0 [ 1557.006277][T20941] loop_control_ioctl+0x468/0x680 [ 1557.083857][T20941] ? xor_init+0x60/0x60 [ 1557.083867][T20941] do_vfs_ioctl+0x6fb/0x15b0 [ 1557.083881][T20941] __x64_sys_ioctl+0xd4/0x110 [ 1557.083889][T20941] do_syscall_64+0xcb/0x1e0 [ 1557.083899][T20941] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1557.083907][T20941] RIP: 0033:0x7f2c46c0dae9 [ 1557.083915][T20941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.083919][T20941] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.083926][T20941] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 18:22:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 30) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1557.083930][T20941] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1557.083934][T20941] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.083938][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1557.083943][T20941] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1557.214278][T20943] loop4: p2 < > p3 p4 [ 1557.218360][T20943] loop4: partition table partially beyond EOD, truncated [ 1557.225706][T20943] loop4: p2 start 44032 is beyond EOD, truncated [ 1557.232033][T20943] loop4: p3 start 225 is beyond EOD, truncated [ 1557.238206][T20943] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1557.273814][T20946] loop1: p2 < > p3 p4 [ 1557.277986][T20946] loop1: partition table partially beyond EOD, truncated [ 1557.286209][T20946] loop1: p2 start 1275068416 is beyond EOD, truncated [ 1557.286951][ T155] loop4: p2 < > p3 p4 [ 1557.293088][T20946] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1557.297345][ T155] loop4: partition table partially beyond EOD, truncated [ 1557.305592][T20946] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:22:02 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000200000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1557.311257][ T155] loop4: p2 start 44032 is beyond EOD, truncated [ 1557.324638][ T155] loop4: p3 start 225 is beyond EOD, truncated [ 1557.324645][ T155] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1557.339200][T20952] loop3: p2 < > p3 p4 [ 1557.343501][T20952] loop3: p2 size 2 extends beyond EOD, truncated [ 1557.350249][T20952] loop3: p3 start 225 is beyond EOD, truncated [ 1557.356668][T20952] loop3: p4 start 67239936 is beyond EOD, truncated 18:22:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000c100000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1557.424736][T20957] FAULT_INJECTION: forcing a failure. [ 1557.424736][T20957] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.437400][T20957] CPU: 0 PID: 20957 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1557.447611][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.457693][T20957] Call Trace: [ 1557.460962][T20957] dump_stack+0x18e/0x1de [ 1557.465266][T20957] should_fail+0x5d8/0x740 [ 1557.469655][T20957] ? __alloc_disk_node+0x76/0x5a0 [ 1557.474650][T20957] should_failslab+0x5/0x20 [ 1557.479124][T20957] kmem_cache_alloc_trace+0x39/0x2b0 [ 1557.484378][T20957] ? apic_timer_interrupt+0xa/0x20 [ 1557.489460][T20957] __alloc_disk_node+0x76/0x5a0 [ 1557.494282][T20957] loop_add+0x323/0x710 [ 1557.498405][T20957] loop_control_ioctl+0x468/0x680 [ 1557.503395][T20957] ? xor_init+0x60/0x60 [ 1557.507522][T20957] do_vfs_ioctl+0x6fb/0x15b0 [ 1557.512083][T20957] __x64_sys_ioctl+0xd4/0x110 [ 1557.516726][T20957] do_syscall_64+0xcb/0x1e0 [ 1557.521198][T20957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1557.527055][T20957] RIP: 0033:0x7f2c46c0dae9 [ 1557.531437][T20957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.551008][T20957] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.559387][T20957] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1557.567335][T20957] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1557.575282][T20957] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.583221][T20957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1557.591159][T20957] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1557.623945][T20953] loop5: p2 < > p3 p4 [ 1557.628162][T20953] loop5: p2 size 2 extends beyond EOD, truncated [ 1557.635113][T20953] loop5: p3 start 225 is beyond EOD, truncated [ 1557.641265][T20953] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000004c4f0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 31) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:03 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000604008000da55aa", 0x40, 0x1c0}]) [ 1557.825148][T20968] FAULT_INJECTION: forcing a failure. [ 1557.825148][T20968] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.838641][T20968] CPU: 1 PID: 20968 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1557.848865][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.858890][T20968] Call Trace: [ 1557.862154][T20968] dump_stack+0x18e/0x1de [ 1557.866455][T20968] should_fail+0x5d8/0x740 [ 1557.870852][T20968] ? __alloc_disk_node+0x76/0x5a0 [ 1557.875848][T20968] should_failslab+0x5/0x20 [ 1557.880321][T20968] kmem_cache_alloc_trace+0x39/0x2b0 [ 1557.885580][T20968] __alloc_disk_node+0x76/0x5a0 [ 1557.890402][T20968] loop_add+0x323/0x710 [ 1557.894529][T20968] loop_control_ioctl+0x468/0x680 [ 1557.899524][T20968] ? xor_init+0x60/0x60 [ 1557.903649][T20968] do_vfs_ioctl+0x6fb/0x15b0 [ 1557.908220][T20968] __x64_sys_ioctl+0xd4/0x110 [ 1557.912888][T20968] do_syscall_64+0xcb/0x1e0 [ 1557.912905][T20968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1557.923239][T20968] RIP: 0033:0x7f2c46c0dae9 [ 1557.927624][T20968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.947201][T20968] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.955581][T20968] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1557.963526][T20968] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1557.971505][T20968] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.979453][T20968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1557.987401][T20968] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:03 executing program 5: syz_read_part_table(0xb, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1558.038484][T20965] loop2: p2 < > p3 p4 [ 1558.042694][T20965] loop2: p2 size 2 extends beyond EOD, truncated [ 1558.044546][T20965] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1558.064779][T20965] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1558.094117][T21076] loop1: p2 < > p3 p4 [ 1558.098296][T21076] loop1: partition table partially beyond EOD, truncated [ 1558.105586][T21076] loop1: p2 start 1330380800 is beyond EOD, truncated [ 1558.112456][T21076] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1558.113753][ T155] loop2: p2 < > p3 p4 [ 1558.120490][T21076] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1558.123740][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1558.137572][T21075] loop4: p2 < > p3 p4 [ 1558.141629][T21075] loop4: partition table partially beyond EOD, truncated [ 1558.144622][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1558.148735][T21075] loop4: p2 start 49408 is beyond EOD, truncated [ 1558.156318][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1558.162596][T21075] loop4: p3 start 225 is beyond EOD, truncated [ 1558.175539][T21075] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1558.197144][T21079] loop3: p2 < > p3 p4 [ 1558.201288][T21079] loop3: p2 size 2 extends beyond EOD, truncated [ 1558.208179][T21079] loop3: p3 start 225 is beyond EOD, truncated [ 1558.214541][T21079] loop3: p4 start 67502080 is beyond EOD, truncated [ 1558.234761][T21084] FAULT_INJECTION: forcing a failure. [ 1558.234761][T21084] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.236585][T21080] loop5: p2 < > p3 p4 [ 1558.247382][T21084] CPU: 0 PID: 21084 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1558.247387][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.247390][T21084] Call Trace: [ 1558.247407][T21084] dump_stack+0x18e/0x1de [ 1558.247420][T21084] should_fail+0x5d8/0x740 [ 1558.247432][T21084] ? __alloc_disk_node+0x319/0x5a0 [ 1558.247443][T21084] should_failslab+0x5/0x20 [ 1558.247454][T21084] kmem_cache_alloc_trace+0x39/0x2b0 [ 1558.247465][T21084] __alloc_disk_node+0x319/0x5a0 [ 1558.247475][T21084] loop_add+0x323/0x710 [ 1558.247489][T21084] loop_control_ioctl+0x468/0x680 [ 1558.251932][T21080] loop5: p2 size 2 extends beyond EOD, truncated [ 1558.261749][T21084] ? xor_init+0x60/0x60 [ 1558.261761][T21084] do_vfs_ioctl+0x6fb/0x15b0 [ 1558.261777][T21084] __x64_sys_ioctl+0xd4/0x110 [ 1558.261786][T21084] do_syscall_64+0xcb/0x1e0 [ 1558.261797][T21084] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1558.261805][T21084] RIP: 0033:0x7f2c46c0dae9 [ 1558.261817][T21084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1558.272604][T21080] loop5: p3 start 225 is beyond EOD, truncated [ 1558.275098][T21084] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.275107][T21084] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1558.275112][T21084] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 18:22:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 33) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1558.275117][T21084] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1558.275122][T21084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1558.275127][T21084] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1558.421030][T21080] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1558.625595][T21089] FAULT_INJECTION: forcing a failure. [ 1558.625595][T21089] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.638352][T21089] CPU: 1 PID: 21089 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1558.648571][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.658609][T21089] Call Trace: [ 1558.661874][T21089] dump_stack+0x18e/0x1de [ 1558.666176][T21089] should_fail+0x5d8/0x740 [ 1558.670562][T21089] ? rand_initialize_disk+0x4b/0xb0 18:22:04 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000005008000da55aa", 0x40, 0x1c0}]) 18:22:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000004c500000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1558.675732][T21089] should_failslab+0x5/0x20 [ 1558.680206][T21089] kmem_cache_alloc_trace+0x39/0x2b0 [ 1558.685462][T21089] ? part_release+0xc0/0xc0 [ 1558.689936][T21089] ? percpu_ref_init+0x189/0x230 [ 1558.694848][T21089] rand_initialize_disk+0x4b/0xb0 [ 1558.699861][T21089] __alloc_disk_node+0x3f6/0x5a0 [ 1558.699879][T21089] loop_add+0x323/0x710 [ 1558.708919][T21089] loop_control_ioctl+0x468/0x680 [ 1558.713914][T21089] ? xor_init+0x60/0x60 [ 1558.718041][T21089] do_vfs_ioctl+0x6fb/0x15b0 [ 1558.722605][T21089] __x64_sys_ioctl+0xd4/0x110 [ 1558.727264][T21089] do_syscall_64+0xcb/0x1e0 [ 1558.731738][T21089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1558.737598][T21089] RIP: 0033:0x7f2c46c0dae9 [ 1558.741985][T21089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1558.761564][T21089] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:22:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 34) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1558.769941][T21089] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1558.777886][T21089] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1558.785824][T21089] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1558.793762][T21089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1558.801751][T21089] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000cc00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:04 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000300000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1558.847538][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1558.858183][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1558.946311][T21104] FAULT_INJECTION: forcing a failure. [ 1558.946311][T21104] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.946430][T21097] loop3: p2 < > p3 p4 [ 1558.959010][T21104] CPU: 0 PID: 21104 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1558.963293][T21097] loop3: p2 size 2 extends beyond EOD, truncated [ 1558.973247][T21104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.973250][T21104] Call Trace: [ 1558.973265][T21104] dump_stack+0x18e/0x1de [ 1558.973278][T21104] should_fail+0x5d8/0x740 [ 1558.973291][T21104] ? sbitmap_init_node+0x145/0x3d0 [ 1558.985903][T21097] loop3: p3 start 225 is beyond EOD, truncated [ 1558.989621][T21104] should_failslab+0x5/0x20 [ 1558.992871][T21097] loop3: p4 start 83886080 is beyond EOD, truncated [ 1558.997164][T21104] __kmalloc+0x5f/0x2f0 [ 1558.997173][T21104] ? sbitmap_init_node+0x1d/0x3d0 [ 1558.997183][T21104] sbitmap_init_node+0x145/0x3d0 [ 1558.997196][T21104] sbitmap_queue_init_node+0x2f/0xbe0 [ 1559.043233][T21104] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 1559.048767][T21104] ? blk_mq_init_tags+0x74/0x290 [ 1559.048781][T21104] ? mutex_unlock+0x19/0x40 [ 1559.058174][T21104] blk_mq_init_tags+0xef/0x290 [ 1559.062916][T21104] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1559.067917][T21104] blk_mq_init_sched+0x1d6/0xb10 [ 1559.072837][T21104] elevator_init_mq+0x2cd/0x3f0 [ 1559.077705][T21104] __device_add_disk+0x87/0x1220 [ 1559.082619][T21104] ? loop_add+0x340/0x710 [ 1559.086952][T21104] loop_add+0x554/0x710 [ 1559.091078][T21104] loop_control_ioctl+0x468/0x680 [ 1559.096069][T21104] ? xor_init+0x60/0x60 [ 1559.100195][T21104] do_vfs_ioctl+0x6fb/0x15b0 [ 1559.104801][T21104] __x64_sys_ioctl+0xd4/0x110 [ 1559.109455][T21104] do_syscall_64+0xcb/0x1e0 [ 1559.113932][T21104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1559.119823][T21104] RIP: 0033:0x7f2c46c0dae9 [ 1559.124240][T21104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.143825][T21104] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1559.152206][T21104] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1559.160149][T21104] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1559.168086][T21104] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1559.176025][T21104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1559.183971][T21104] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:04 executing program 5: syz_read_part_table(0xc, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1559.192264][T21104] "mq-deadline" elevator initialization failed, falling back to "none" [ 1559.274188][ T155] loop2: p2 < > p3 p4 [ 1559.279005][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1559.286338][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1559.294005][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1559.302662][T21105] loop2: p2 < > p3 p4 [ 1559.306939][T21105] loop2: p2 size 2 extends beyond EOD, truncated [ 1559.313704][T21105] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:22:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 35) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1559.321236][T21105] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:04 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000006008000da55aa", 0x40, 0x1c0}]) [ 1559.494405][T21109] loop1: p2 < > p3 p4 [ 1559.498613][T21109] loop1: partition table partially beyond EOD, truncated [ 1559.506031][T21109] loop1: p2 start 1347158016 is beyond EOD, truncated [ 1559.512844][T21109] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1559.520521][T21109] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1559.543933][T21117] FAULT_INJECTION: forcing a failure. [ 1559.543933][T21117] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.544026][T21105] loop2: p2 < > p3 p4 [ 1559.556578][T21117] CPU: 1 PID: 21117 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1559.561007][T21105] loop2: p2 size 2 extends beyond EOD, truncated [ 1559.570850][T21117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.570853][T21117] Call Trace: [ 1559.570868][T21117] dump_stack+0x18e/0x1de [ 1559.570880][T21117] should_fail+0x5d8/0x740 [ 1559.570890][T21117] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1559.570905][T21117] should_failslab+0x5/0x20 [ 1559.577819][T21105] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1559.587233][T21117] kmem_cache_alloc_trace+0x39/0x2b0 [ 1559.587245][T21117] sbitmap_queue_init_node+0x3db/0xbe0 [ 1559.587256][T21117] blk_mq_init_tags+0xef/0x290 [ 1559.587268][T21117] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1559.591305][T21105] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1559.594825][T21117] blk_mq_init_sched+0x1d6/0xb10 [ 1559.594839][T21117] elevator_init_mq+0x2cd/0x3f0 [ 1559.594852][T21117] __device_add_disk+0x87/0x1220 [ 1559.658478][T21117] ? loop_add+0x340/0x710 [ 1559.658487][T21117] loop_add+0x554/0x710 [ 1559.658497][T21117] loop_control_ioctl+0x468/0x680 [ 1559.658504][T21117] ? xor_init+0x60/0x60 [ 1559.658513][T21117] do_vfs_ioctl+0x6fb/0x15b0 [ 1559.658526][T21117] __x64_sys_ioctl+0xd4/0x110 [ 1559.658534][T21117] do_syscall_64+0xcb/0x1e0 18:22:05 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000400000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1559.658550][T21117] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1559.658557][T21117] RIP: 0033:0x7f2c46c0dae9 [ 1559.658565][T21117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.658569][T21117] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1559.658577][T21117] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1559.658581][T21117] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1559.658585][T21117] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1559.658589][T21117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1559.658593][T21117] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1559.658675][T21117] "mq-deadline" elevator initialization failed, falling back to "none" [ 1559.744101][T21115] loop4: p2 < > p3 p4 [ 1559.785684][T21115] loop4: partition table partially beyond EOD, truncated 18:22:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 36) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1559.792800][T21115] loop4: p2 start 52224 is beyond EOD, truncated [ 1559.799216][T21115] loop4: p3 start 225 is beyond EOD, truncated [ 1559.805443][T21115] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000600000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1559.943886][T21120] loop5: p2 < > p3 p4 [ 1559.948068][T21120] loop5: p2 size 2 extends beyond EOD, truncated [ 1559.954941][T21120] loop5: p3 start 225 is beyond EOD, truncated [ 1559.961072][T21120] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1559.974444][T21124] loop3: p2 < > p3 p4 [ 1559.978614][T21124] loop3: p2 size 2 extends beyond EOD, truncated [ 1559.985770][T21124] loop3: p3 start 225 is beyond EOD, truncated [ 1559.991913][T21124] loop3: p4 start 100663296 is beyond EOD, truncated [ 1560.053716][ T96] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1560.064587][ T96] Buffer I/O error on dev loop4, logical block 0, async page read [ 1560.072413][ T155] loop4: unable to read partition table [ 1560.078235][ T155] loop4: partition table beyond EOD, truncated [ 1560.106088][T21129] FAULT_INJECTION: forcing a failure. [ 1560.106088][T21129] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.118731][T21129] CPU: 0 PID: 21129 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1560.128934][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.138956][T21129] Call Trace: [ 1560.142226][T21129] dump_stack+0x18e/0x1de [ 1560.146540][T21129] should_fail+0x5d8/0x740 [ 1560.150932][T21129] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1560.156534][T21129] should_failslab+0x5/0x20 [ 1560.161005][T21129] kmem_cache_alloc_trace+0x39/0x2b0 [ 1560.166335][T21129] sbitmap_queue_init_node+0x3db/0xbe0 [ 1560.171762][T21129] blk_mq_init_tags+0x153/0x290 [ 1560.176579][T21129] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1560.181572][T21129] blk_mq_init_sched+0x1d6/0xb10 [ 1560.186507][T21129] elevator_init_mq+0x2cd/0x3f0 [ 1560.191336][T21129] __device_add_disk+0x87/0x1220 [ 1560.196254][T21129] ? loop_add+0x340/0x710 [ 1560.200566][T21129] loop_add+0x554/0x710 [ 1560.204698][T21129] loop_control_ioctl+0x468/0x680 [ 1560.209719][T21129] ? xor_init+0x60/0x60 [ 1560.213850][T21129] do_vfs_ioctl+0x6fb/0x15b0 [ 1560.218411][T21129] __x64_sys_ioctl+0xd4/0x110 [ 1560.223057][T21129] do_syscall_64+0xcb/0x1e0 [ 1560.227531][T21129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1560.233395][T21129] RIP: 0033:0x7f2c46c0dae9 [ 1560.237781][T21129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.257355][T21129] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.265764][T21129] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1560.273705][T21129] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1560.281647][T21129] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1560.289585][T21129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.297522][T21129] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1560.305674][T21129] "mq-deadline" elevator initialization failed, falling back to "none" 18:22:05 executing program 5: syz_read_part_table(0xd, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080003ce00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 37) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:05 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000406008000da55aa", 0x40, 0x1c0}]) [ 1560.433052][ T155] loop2: p2 < > p3 p4 [ 1560.437260][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1560.444133][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1560.451545][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1560.460517][T21131] loop2: p2 < > p3 p4 [ 1560.464791][T21131] loop2: p2 size 2 extends beyond EOD, truncated [ 1560.471902][T21131] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1560.473720][T21241] loop5: p2 < > p3 p4 [ 1560.480239][T21131] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1560.483794][T21241] loop5: p2 size 2 extends beyond EOD, truncated [ 1560.491415][T21245] FAULT_INJECTION: forcing a failure. [ 1560.491415][T21245] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.498266][T21241] loop5: p3 start 225 is beyond EOD, truncated [ 1560.510246][T21245] CPU: 1 PID: 21245 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1560.510250][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.510258][T21245] Call Trace: [ 1560.516431][T21241] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1560.526587][T21245] dump_stack+0x18e/0x1de [ 1560.526600][T21245] should_fail+0x5d8/0x740 [ 1560.526613][T21245] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1560.560810][T21245] should_failslab+0x5/0x20 [ 1560.565348][T21245] __kmalloc+0x5f/0x2f0 [ 1560.569486][T21245] ? blk_mq_init_tags+0x209/0x290 [ 1560.574490][T21245] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1560.579487][T21245] blk_mq_init_sched+0x1d6/0xb10 [ 1560.584403][T21245] elevator_init_mq+0x2cd/0x3f0 [ 1560.589226][T21245] __device_add_disk+0x87/0x1220 [ 1560.594138][T21245] ? loop_add+0x340/0x710 [ 1560.598437][T21245] loop_add+0x554/0x710 [ 1560.602567][T21245] loop_control_ioctl+0x468/0x680 [ 1560.607560][T21245] ? xor_init+0x60/0x60 [ 1560.611687][T21245] do_vfs_ioctl+0x6fb/0x15b0 [ 1560.616252][T21245] __x64_sys_ioctl+0xd4/0x110 [ 1560.620916][T21245] do_syscall_64+0xcb/0x1e0 [ 1560.620929][T21245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1560.620937][T21245] RIP: 0033:0x7f2c46c0dae9 [ 1560.620951][T21245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.655249][T21245] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.663634][T21245] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1560.671584][T21245] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1560.679525][T21245] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1560.687466][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.695405][T21245] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1560.703563][T21245] "mq-deadline" elevator initialization failed, falling back to "none" 18:22:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 38) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1560.894631][T21246] loop1: p2 < > p3 p4 [ 1560.898728][T21246] loop1: partition table partially beyond EOD, truncated [ 1560.905975][T21246] loop1: p2 start 1610612736 is beyond EOD, truncated [ 1560.912712][T21246] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1560.920420][T21246] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1560.928339][T21249] loop4: p2 < > p3 p4 [ 1560.932513][T21249] loop4: partition table partially beyond EOD, truncated 18:22:06 executing program 5: syz_read_part_table(0xe, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:06 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000500000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1560.939748][T21249] loop4: p2 start 52739 is beyond EOD, truncated [ 1560.946115][T21249] loop4: p3 start 225 is beyond EOD, truncated [ 1560.952839][T21249] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1560.963753][T21253] loop3: p2 < > p3 p4 [ 1560.967962][T21253] loop3: p2 size 2 extends beyond EOD, truncated [ 1560.975983][T21253] loop3: p3 start 225 is beyond EOD, truncated [ 1560.982243][T21253] loop3: p4 start 100925440 is beyond EOD, truncated [ 1561.015765][T21258] FAULT_INJECTION: forcing a failure. [ 1561.015765][T21258] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.028576][T21258] CPU: 0 PID: 21258 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1561.039040][T21258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.049212][T21258] Call Trace: [ 1561.049231][T21258] dump_stack+0x18e/0x1de [ 1561.049248][T21258] should_fail+0x5d8/0x740 [ 1561.061189][T21258] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1561.066360][T21258] should_failslab+0x5/0x20 [ 1561.070833][T21258] __kmalloc+0x5f/0x2f0 [ 1561.074955][T21258] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1561.080119][T21258] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1561.085115][T21258] blk_mq_init_sched+0x1d6/0xb10 [ 1561.090026][T21258] elevator_init_mq+0x2cd/0x3f0 [ 1561.094845][T21258] __device_add_disk+0x87/0x1220 [ 1561.099751][T21258] ? loop_add+0x340/0x710 [ 1561.104051][T21258] loop_add+0x554/0x710 [ 1561.108177][T21258] loop_control_ioctl+0x468/0x680 [ 1561.113176][T21258] ? xor_init+0x60/0x60 [ 1561.117304][T21258] do_vfs_ioctl+0x6fb/0x15b0 [ 1561.121865][T21258] __x64_sys_ioctl+0xd4/0x110 [ 1561.126511][T21258] do_syscall_64+0xcb/0x1e0 [ 1561.130988][T21258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1561.136850][T21258] RIP: 0033:0x7f2c46c0dae9 [ 1561.141233][T21258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.160806][T21258] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.169183][T21258] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1561.177133][T21258] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1561.185084][T21258] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.193031][T21258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1561.200979][T21258] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1561.209630][T21258] "mq-deadline" elevator initialization failed, falling back to "none" 18:22:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 39) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000680000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:06 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000007008000da55aa", 0x40, 0x1c0}]) 18:22:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080003d000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1561.412030][T21262] loop5: p2 < > p3 p4 [ 1561.416352][T21262] loop5: p2 size 2 extends beyond EOD, truncated [ 1561.416596][T21270] FAULT_INJECTION: forcing a failure. [ 1561.416596][T21270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1561.426724][T21262] loop5: p3 start 225 is beyond EOD, truncated [ 1561.435948][T21270] CPU: 0 PID: 21270 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1561.442289][T21262] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1561.452229][T21270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.452232][T21270] Call Trace: [ 1561.452249][T21270] dump_stack+0x18e/0x1de [ 1561.452261][T21270] should_fail+0x5d8/0x740 [ 1561.452274][T21270] __alloc_pages_nodemask+0x12e/0x740 [ 1561.452286][T21270] blk_mq_alloc_rqs+0x252/0x660 [ 1561.452298][T21270] ? blk_mq_alloc_rq_map+0x11a/0x1a0 [ 1561.452307][T21270] blk_mq_init_sched+0x235/0xb10 [ 1561.452322][T21270] elevator_init_mq+0x2cd/0x3f0 [ 1561.452333][T21270] __device_add_disk+0x87/0x1220 [ 1561.452342][T21270] ? vsnprintf+0x19fd/0x1aa0 [ 1561.452357][T21270] loop_add+0x554/0x710 [ 1561.452370][T21270] loop_control_ioctl+0x468/0x680 [ 1561.525092][T21270] ? xor_init+0x60/0x60 [ 1561.529254][T21270] do_vfs_ioctl+0x6fb/0x15b0 [ 1561.533827][T21270] __x64_sys_ioctl+0xd4/0x110 [ 1561.538477][T21270] do_syscall_64+0xcb/0x1e0 [ 1561.543013][T21270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1561.548875][T21270] RIP: 0033:0x7f2c46c0dae9 [ 1561.553270][T21270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.572897][T21270] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.581283][T21270] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1561.589231][T21270] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1561.597219][T21270] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.605164][T21270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:22:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 40) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1561.613113][T21270] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1561.633081][ T155] loop5: p2 < > p3 p4 [ 1561.637870][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1561.644686][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1561.650836][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1561.714591][T21273] loop2: p2 < > p3 p4 [ 1561.718734][T21273] loop2: p2 size 2 extends beyond EOD, truncated [ 1561.725641][T21273] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1561.733257][T21273] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1561.774189][T21272] loop3: p2 < > p3 p4 [ 1561.778352][T21272] loop3: p2 size 2 extends beyond EOD, truncated [ 1561.785202][T21272] loop3: p3 start 225 is beyond EOD, truncated [ 1561.791369][T21272] loop3: p4 start 117440512 is beyond EOD, truncated [ 1561.834131][T21276] loop1: p2 < > p3 p4 [ 1561.838240][T21276] loop1: partition table partially beyond EOD, truncated [ 1561.845416][T21276] loop1: p2 start 1744830464 is beyond EOD, truncated [ 1561.852380][T21276] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1561.859911][T21276] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1561.974731][T21285] FAULT_INJECTION: forcing a failure. [ 1561.974731][T21285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1561.988007][T21285] CPU: 0 PID: 21285 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1561.998208][T21285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.008234][T21285] Call Trace: [ 1562.011500][T21285] dump_stack+0x18e/0x1de [ 1562.015802][T21285] should_fail+0x5d8/0x740 [ 1562.020191][T21285] __alloc_pages_nodemask+0x12e/0x740 [ 1562.025532][T21285] blk_mq_alloc_rqs+0x252/0x660 [ 1562.030380][T21285] ? blk_mq_alloc_rq_map+0x11a/0x1a0 [ 1562.035648][T21285] blk_mq_init_sched+0x235/0xb10 [ 1562.040560][T21285] elevator_init_mq+0x2cd/0x3f0 [ 1562.045388][T21285] __device_add_disk+0x87/0x1220 [ 1562.050294][T21285] ? loop_add+0x340/0x710 [ 1562.054592][T21285] loop_add+0x554/0x710 [ 1562.058738][T21285] loop_control_ioctl+0x468/0x680 [ 1562.063737][T21285] ? xor_init+0x60/0x60 [ 1562.067866][T21285] do_vfs_ioctl+0x6fb/0x15b0 [ 1562.072430][T21285] __x64_sys_ioctl+0xd4/0x110 [ 1562.077090][T21285] do_syscall_64+0xcb/0x1e0 [ 1562.081573][T21285] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1562.087444][T21285] RIP: 0033:0x7f2c46c0dae9 [ 1562.091829][T21285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.111402][T21285] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.119780][T21285] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1562.127727][T21285] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1562.135675][T21285] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.143613][T21285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.151551][T21285] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:07 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000009008000da55aa", 0x40, 0x1c0}]) 18:22:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000e100000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:07 executing program 5: syz_read_part_table(0x10, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000006c0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:07 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000600000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1562.485545][T21293] FAULT_INJECTION: forcing a failure. [ 1562.485545][T21293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1562.498796][T21293] CPU: 0 PID: 21293 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1562.509005][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.519031][T21293] Call Trace: [ 1562.522297][T21293] dump_stack+0x18e/0x1de [ 1562.526599][T21293] should_fail+0x5d8/0x740 [ 1562.530985][T21293] __alloc_pages_nodemask+0x12e/0x740 [ 1562.536329][T21293] blk_mq_alloc_rqs+0x252/0x660 [ 1562.541151][T21293] blk_mq_init_sched+0x235/0xb10 [ 1562.546078][T21293] elevator_init_mq+0x2cd/0x3f0 [ 1562.550895][T21293] __device_add_disk+0x87/0x1220 [ 1562.555802][T21293] ? loop_add+0x340/0x710 [ 1562.560099][T21293] loop_add+0x554/0x710 [ 1562.564236][T21293] loop_control_ioctl+0x468/0x680 [ 1562.569229][T21293] ? xor_init+0x60/0x60 [ 1562.573363][T21293] do_vfs_ioctl+0x6fb/0x15b0 [ 1562.577947][T21293] __x64_sys_ioctl+0xd4/0x110 [ 1562.582604][T21293] do_syscall_64+0xcb/0x1e0 [ 1562.587079][T21293] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1562.592951][T21293] RIP: 0033:0x7f2c46c0dae9 [ 1562.597343][T21293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.616924][T21293] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.625299][T21293] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1562.633240][T21293] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1562.641183][T21293] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.649149][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.657087][T21293] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 42) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1562.744088][T21297] loop5: p2 < > p3 p4 [ 1562.748292][T21297] loop5: p2 size 2 extends beyond EOD, truncated [ 1562.755241][T21297] loop5: p3 start 225 is beyond EOD, truncated [ 1562.761392][T21297] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1562.834133][T21291] loop3: p2 < > p3 p4 [ 1562.838337][T21291] loop3: p2 size 2 extends beyond EOD, truncated [ 1562.844976][ T96] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1562.845505][T21291] loop3: p3 start 225 is beyond EOD, truncated [ 1562.855870][ T96] Buffer I/O error on dev loop5, logical block 0, async page read [ 1562.862258][T21291] loop3: p4 start 150994944 is beyond EOD, truncated [ 1562.870006][ T96] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1562.878173][T21301] loop1: p2 < > p3 p4 [ 1562.887527][ T96] Buffer I/O error on dev loop5, logical block 0, async page read [ 1562.887870][ T155] loop5: unable to read partition table [ 1562.891695][T21301] loop1: partition table partially beyond EOD, truncated [ 1562.912810][T21301] loop1: p2 start 1811939328 is beyond EOD, truncated [ 1562.919626][T21301] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1562.927445][T21301] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1563.003805][T21309] loop2: p2 < > p3 p4 [ 1563.007948][T21309] loop2: p2 size 2 extends beyond EOD, truncated [ 1563.015037][T21309] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1563.022528][T21309] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1563.034234][T21307] loop4: p2 < > p3 p4 [ 1563.038324][T21307] loop4: partition table partially beyond EOD, truncated [ 1563.045594][T21307] loop4: p2 start 57600 is beyond EOD, truncated [ 1563.051920][T21307] loop4: p3 start 225 is beyond EOD, truncated [ 1563.058263][T21307] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1563.085652][T21313] FAULT_INJECTION: forcing a failure. [ 1563.085652][T21313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1563.098881][T21313] CPU: 1 PID: 21313 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1563.109092][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.119118][T21313] Call Trace: [ 1563.122381][T21313] dump_stack+0x18e/0x1de [ 1563.126687][T21313] should_fail+0x5d8/0x740 [ 1563.131078][T21313] __alloc_pages_nodemask+0x12e/0x740 [ 1563.136421][T21313] blk_mq_alloc_rqs+0x252/0x660 [ 1563.141259][T21313] blk_mq_init_sched+0x235/0xb10 [ 1563.146181][T21313] elevator_init_mq+0x2cd/0x3f0 [ 1563.151001][T21313] __device_add_disk+0x87/0x1220 [ 1563.155908][T21313] ? loop_add+0x340/0x710 [ 1563.160207][T21313] loop_add+0x554/0x710 [ 1563.164336][T21313] loop_control_ioctl+0x468/0x680 [ 1563.169341][T21313] ? xor_init+0x60/0x60 [ 1563.173474][T21313] do_vfs_ioctl+0x6fb/0x15b0 [ 1563.178051][T21313] __x64_sys_ioctl+0xd4/0x110 [ 1563.182710][T21313] do_syscall_64+0xcb/0x1e0 [ 1563.187184][T21313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1563.193048][T21313] RIP: 0033:0x7f2c46c0dae9 [ 1563.197434][T21313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.217008][T21313] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.225427][T21313] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1563.233373][T21313] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1563.241319][T21313] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.249307][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.257249][T21313] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 43) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:08 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000a008000da55aa", 0x40, 0x1c0}]) 18:22:08 executing program 5: syz_read_part_table(0x11, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000740000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1563.383386][ T119] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1563.394265][ T119] Buffer I/O error on dev loop2, logical block 0, async page read [ 1563.402142][ T96] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1563.412996][ T96] Buffer I/O error on dev loop2, logical block 0, async page read [ 1563.420866][ T155] loop2: unable to read partition table [ 1563.436120][T21422] loop5: p2 < > p3 p4 [ 1563.440267][T21422] loop5: p2 size 2 extends beyond EOD, truncated [ 1563.447402][T21422] loop5: p3 start 225 is beyond EOD, truncated [ 1563.453587][T21422] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080003e400000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1563.516438][T21421] loop3: p2 < > p3 p4 [ 1563.520712][T21421] loop3: p2 size 2 extends beyond EOD, truncated [ 1563.527834][T21421] loop3: p3 start 225 is beyond EOD, truncated [ 1563.534270][T21421] loop3: p4 start 167772160 is beyond EOD, truncated [ 1563.556536][T21429] FAULT_INJECTION: forcing a failure. [ 1563.556536][T21429] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.569241][T21429] CPU: 0 PID: 21429 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1563.579444][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.589489][T21429] Call Trace: [ 1563.592753][T21429] dump_stack+0x18e/0x1de [ 1563.597057][T21429] should_fail+0x5d8/0x740 [ 1563.601446][T21429] ? device_create_vargs+0x7d/0x210 [ 1563.606613][T21429] should_failslab+0x5/0x20 [ 1563.611083][T21429] kmem_cache_alloc_trace+0x39/0x2b0 [ 1563.616335][T21429] ? number+0xf64/0x11e0 [ 1563.620563][T21429] device_create_vargs+0x7d/0x210 [ 1563.625557][T21429] device_create+0x86/0xb0 [ 1563.629939][T21429] ? vsnprintf+0x1a07/0x1aa0 [ 1563.634499][T21429] bdi_register_va+0x89/0x5e0 [ 1563.639152][T21429] bdi_register+0x80/0xa0 [ 1563.643452][T21429] ? __device_add_disk+0x50a/0x1220 [ 1563.648616][T21429] bdi_register_owner+0x56/0xf0 [ 1563.653445][T21429] __device_add_disk+0x583/0x1220 [ 1563.658452][T21429] loop_add+0x554/0x710 [ 1563.662580][T21429] loop_control_ioctl+0x468/0x680 [ 1563.667580][T21429] ? xor_init+0x60/0x60 [ 1563.671717][T21429] do_vfs_ioctl+0x6fb/0x15b0 [ 1563.676287][T21429] ? apic_timer_interrupt+0xa/0x20 [ 1563.681377][T21429] ? __x64_sys_ioctl+0xa7/0x110 [ 1563.686201][T21429] ? __x64_sys_ioctl+0xc3/0x110 [ 1563.691019][T21429] __x64_sys_ioctl+0xd4/0x110 [ 1563.695663][T21429] do_syscall_64+0xcb/0x1e0 [ 1563.700134][T21429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1563.705996][T21429] RIP: 0033:0x7f2c46c0dae9 [ 1563.710378][T21429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.729952][T21429] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.738336][T21429] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1563.746284][T21429] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1563.754222][T21429] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.762172][T21429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.770113][T21429] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1563.779144][T21429] ------------[ cut here ]------------ [ 1563.784611][T21429] WARNING: CPU: 0 PID: 21429 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1563.784619][T21429] Modules linked in: [ 1563.797561][T21429] CPU: 0 PID: 21429 Comm: syz-executor.0 Not tainted 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1563.807757][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.817797][T21429] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1563.823627][T21429] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1563.843207][T21429] RSP: 0018:ffff8881a4057ce8 EFLAGS: 00010246 [ 1563.849246][T21429] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1563.857190][T21429] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1563.865134][T21429] RBP: ffff8881eed16718 R08: ffffffff82147a3e R09: fffffbfff0bac77f [ 1563.873073][T21429] R10: fffffbfff0bac77f R11: 0000000000000000 R12: dffffc0000000000 [ 1563.881013][T21429] R13: 1ffff1103253e001 R14: 1ffff1103253e09d R15: ffff8881929f0000 [ 1563.888959][T21429] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1563.897864][T21429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.904417][T21429] CR2: 00007f2c44963718 CR3: 000000019cb81000 CR4: 00000000003406f0 [ 1563.912357][T21429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1563.920297][T21429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1563.928234][T21429] Call Trace: [ 1563.931505][T21429] loop_add+0x554/0x710 [ 1563.935630][T21429] loop_control_ioctl+0x468/0x680 [ 1563.940624][T21429] ? xor_init+0x60/0x60 [ 1563.944752][T21429] do_vfs_ioctl+0x6fb/0x15b0 [ 1563.949314][T21429] ? apic_timer_interrupt+0xa/0x20 [ 1563.954395][T21429] ? __x64_sys_ioctl+0xa7/0x110 [ 1563.959219][T21429] ? __x64_sys_ioctl+0xc3/0x110 [ 1563.964039][T21429] __x64_sys_ioctl+0xd4/0x110 [ 1563.968685][T21429] do_syscall_64+0xcb/0x1e0 [ 1563.973163][T21429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1563.979028][T21429] RIP: 0033:0x7f2c46c0dae9 [ 1563.983410][T21429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.002978][T21429] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.011358][T21429] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1564.019303][T21429] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1564.027289][T21429] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.035230][T21429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.043174][T21429] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1564.051129][T21429] ---[ end trace dcabad1d1d3cdeac ]--- 18:22:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:09 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000700000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:09 executing program 5: syz_read_part_table(0x12, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:09 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000b008000da55aa", 0x40, 0x1c0}]) [ 1564.237298][T21439] FAULT_INJECTION: forcing a failure. [ 1564.237298][T21439] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.250463][T21439] CPU: 0 PID: 21439 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1564.262060][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1564.272084][T21439] Call Trace: [ 1564.275347][T21439] dump_stack+0x18e/0x1de [ 1564.279646][T21439] should_fail+0x5d8/0x740 [ 1564.284032][T21439] ? kobject_set_name_vargs+0x5d/0x110 [ 1564.289458][T21439] should_failslab+0x5/0x20 [ 1564.293929][T21439] __kmalloc_track_caller+0x5d/0x2e0 [ 1564.299187][T21439] ? hrtimer_init+0xc0/0x330 [ 1564.303746][T21439] ? kvasprintf_const+0x6a/0x170 [ 1564.308653][T21439] kstrdup_const+0x51/0x90 [ 1564.313084][T21439] kobject_set_name_vargs+0x5d/0x110 [ 1564.318348][T21439] device_create_vargs+0x182/0x210 [ 1564.323438][T21439] device_create+0x86/0xb0 [ 1564.327822][T21439] ? vsnprintf+0x1a07/0x1aa0 [ 1564.332381][T21439] bdi_register_va+0x89/0x5e0 [ 1564.337028][T21439] bdi_register+0x80/0xa0 [ 1564.341323][T21439] ? __device_add_disk+0x50a/0x1220 [ 1564.346485][T21439] ? bdi_register_va+0x5e0/0x5e0 [ 1564.351391][T21439] bdi_register_owner+0x56/0xf0 [ 1564.356238][T21439] __device_add_disk+0x583/0x1220 [ 1564.356254][T21439] loop_add+0x554/0x710 [ 1564.365380][T21439] loop_control_ioctl+0x468/0x680 [ 1564.370372][T21439] ? xor_init+0x60/0x60 [ 1564.374497][T21439] do_vfs_ioctl+0x6fb/0x15b0 [ 1564.379065][T21439] __x64_sys_ioctl+0xd4/0x110 [ 1564.383712][T21439] do_syscall_64+0xcb/0x1e0 [ 1564.388184][T21439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1564.394041][T21439] RIP: 0033:0x7f2c46c0dae9 [ 1564.398426][T21439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.418004][T21439] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.426385][T21439] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1564.434331][T21439] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1564.442270][T21439] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.450209][T21439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.458149][T21439] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1564.466347][T21439] ------------[ cut here ]------------ [ 1564.471812][T21439] WARNING: CPU: 0 PID: 21439 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1564.480892][T21439] Modules linked in: [ 1564.484764][T21439] CPU: 0 PID: 21439 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1564.496351][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1564.506383][T21439] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1564.512162][T21439] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1564.531735][T21439] RSP: 0018:ffff8881edf5fce8 EFLAGS: 00010246 [ 1564.537767][T21439] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1564.545708][T21439] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1564.553653][T21439] RBP: ffff8881eed15e88 R08: ffffffff82147a3e R09: ffffed103dbebed4 [ 1564.561595][T21439] R10: ffffed103dbebed4 R11: 0000000000000000 R12: dffffc0000000000 [ 1564.569535][T21439] R13: 1ffff1103253ee01 R14: 1ffff1103253ee9d R15: ffff8881929f7000 [ 1564.577476][T21439] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1564.586373][T21439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1564.592928][T21439] CR2: 0000000020003540 CR3: 00000001e0cc9000 CR4: 00000000003406f0 [ 1564.600874][T21439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1564.608818][T21439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1564.616758][T21439] Call Trace: [ 1564.620028][T21439] loop_add+0x554/0x710 [ 1564.624160][T21439] loop_control_ioctl+0x468/0x680 [ 1564.629155][T21439] ? xor_init+0x60/0x60 [ 1564.633280][T21439] do_vfs_ioctl+0x6fb/0x15b0 [ 1564.637846][T21439] __x64_sys_ioctl+0xd4/0x110 [ 1564.642496][T21439] do_syscall_64+0xcb/0x1e0 [ 1564.646972][T21439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1564.652832][T21439] RIP: 0033:0x7f2c46c0dae9 [ 1564.657219][T21439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.676790][T21439] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.685168][T21439] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1564.693112][T21439] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1564.701056][T21439] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.708997][T21439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.716941][T21439] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1564.724897][T21439] ---[ end trace dcabad1d1d3cdead ]--- [ 1564.747100][ T155] loop1: p2 < > p3 p4 [ 1564.751233][ T155] loop1: partition table partially beyond EOD, truncated [ 1564.759331][ T155] loop1: p2 start 1946157056 is beyond EOD, truncated [ 1564.766209][ T155] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1564.773781][ T155] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1564.781916][T21430] loop1: p2 < > p3 p4 [ 1564.786085][T21430] loop1: partition table partially beyond EOD, truncated 18:22:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 45) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1564.793461][T21430] loop1: p2 start 1946157056 is beyond EOD, truncated [ 1564.800806][T21430] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1564.810037][T21430] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1564.834916][T21442] loop2: p2 < > p3 p4 [ 1564.840239][T21442] loop2: p2 size 2 extends beyond EOD, truncated [ 1564.847632][T21442] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1564.855515][T21442] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000007a0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1564.945083][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1564.945135][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1564.955676][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1564.994761][T21456] FAULT_INJECTION: forcing a failure. [ 1564.994761][T21456] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.007472][T21456] CPU: 0 PID: 21456 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1565.008135][ T155] loop5: p2 < > p3 p4 [ 1565.019071][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.019075][T21456] Call Trace: [ 1565.019091][T21456] dump_stack+0x18e/0x1de [ 1565.019107][T21456] should_fail+0x5d8/0x740 [ 1565.023284][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1565.033185][T21456] ? kobject_set_name_vargs+0x5d/0x110 [ 1565.033201][T21456] should_failslab+0x5/0x20 [ 1565.036988][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1565.040753][T21456] __kmalloc_track_caller+0x5d/0x2e0 [ 1565.045139][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1565.051441][T21456] kstrdup_const+0x51/0x90 [ 1565.084461][T21456] kobject_set_name_vargs+0x5d/0x110 [ 1565.089737][T21456] device_create_vargs+0x182/0x210 [ 1565.094833][T21456] device_create+0x86/0xb0 [ 1565.099216][T21456] ? vsnprintf+0x1a07/0x1aa0 [ 1565.103781][T21456] bdi_register_va+0x89/0x5e0 [ 1565.108428][T21456] bdi_register+0x80/0xa0 [ 1565.112738][T21456] ? apic_timer_interrupt+0xa/0x20 [ 1565.117826][T21456] ? __device_add_disk+0x50a/0x1220 [ 1565.122988][T21456] bdi_register_owner+0x56/0xf0 [ 1565.127807][T21456] __device_add_disk+0x583/0x1220 [ 1565.132804][T21456] loop_add+0x554/0x710 [ 1565.136937][T21456] loop_control_ioctl+0x468/0x680 [ 1565.141935][T21456] ? xor_init+0x60/0x60 [ 1565.146061][T21456] do_vfs_ioctl+0x6fb/0x15b0 [ 1565.150630][T21456] __x64_sys_ioctl+0xd4/0x110 [ 1565.155283][T21456] do_syscall_64+0xcb/0x1e0 [ 1565.159762][T21456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1565.165627][T21456] RIP: 0033:0x7f2c46c0dae9 [ 1565.170016][T21456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1565.189592][T21456] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.197973][T21456] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1565.205915][T21456] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1565.213857][T21456] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.221798][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.229742][T21456] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1565.239248][T21456] ------------[ cut here ]------------ [ 1565.244700][T21456] WARNING: CPU: 0 PID: 21456 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1565.253765][T21456] Modules linked in: [ 1565.257631][T21456] CPU: 0 PID: 21456 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1565.269215][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.279250][T21456] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1565.285031][T21456] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1565.304618][T21456] RSP: 0018:ffff8881a612fce8 EFLAGS: 00010246 [ 1565.310660][T21456] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1565.318599][T21456] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1565.326539][T21456] RBP: ffff8881eed144d8 R08: ffffffff82147a3e R09: 0000000000000011 [ 1565.334477][T21456] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1565.342417][T21456] R13: 1ffff1103e156601 R14: 1ffff1103e15669d R15: ffff8881f0ab3000 [ 1565.350367][T21456] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1565.359273][T21456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1565.365826][T21456] CR2: 00007ffc4d220ff8 CR3: 00000001e4b82000 CR4: 00000000003406f0 [ 1565.373768][T21456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1565.381706][T21456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1565.389643][T21456] Call Trace: [ 1565.392911][T21456] loop_add+0x554/0x710 [ 1565.397037][T21456] loop_control_ioctl+0x468/0x680 [ 1565.402026][T21456] ? xor_init+0x60/0x60 [ 1565.406151][T21456] do_vfs_ioctl+0x6fb/0x15b0 [ 1565.410716][T21456] __x64_sys_ioctl+0xd4/0x110 [ 1565.415361][T21456] do_syscall_64+0xcb/0x1e0 [ 1565.419834][T21456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1565.425695][T21456] RIP: 0033:0x7f2c46c0dae9 [ 1565.430096][T21456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1565.449676][T21456] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.458060][T21456] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1565.465997][T21456] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1565.473935][T21456] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.481872][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.489809][T21456] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1565.497760][T21456] ---[ end trace dcabad1d1d3cdeae ]--- 18:22:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 46) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:11 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000900000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1565.600429][T21445] loop4: p2 < > p3 p4 [ 1565.606561][T21448] loop5: p2 < > p3 p4 [ 1565.610950][T21448] loop5: p2 size 2 extends beyond EOD, truncated [ 1565.617659][T21445] loop4: partition table partially beyond EOD, truncated [ 1565.626835][T21448] loop5: p3 start 225 is beyond EOD, truncated [ 1565.632976][T21448] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1565.638006][T21445] loop4: p2 start 58371 is beyond EOD, truncated 18:22:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000fff00000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1565.646956][T21451] loop3: p2 < > p3 p4 [ 1565.649055][T21445] loop4: p3 start 225 is beyond EOD, truncated [ 1565.651117][T21451] loop3: p2 size 2 extends beyond EOD, truncated [ 1565.651687][T21451] loop3: p3 start 225 is beyond EOD, truncated [ 1565.657738][T21445] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1565.664013][T21451] loop3: p4 start 184549376 is beyond EOD, truncated 18:22:11 executing program 5: syz_read_part_table(0x25, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:11 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000c008000da55aa", 0x40, 0x1c0}]) [ 1565.888293][T21566] FAULT_INJECTION: forcing a failure. [ 1565.888293][T21566] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.900913][T21566] CPU: 1 PID: 21566 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1565.912506][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.922535][T21566] Call Trace: [ 1565.925803][T21566] dump_stack+0x18e/0x1de [ 1565.930104][T21566] should_fail+0x5d8/0x740 [ 1565.934497][T21566] ? __kernfs_new_node+0x47/0x630 [ 1565.939493][T21566] should_failslab+0x5/0x20 [ 1565.943967][T21566] __kmalloc_track_caller+0x5d/0x2e0 [ 1565.949226][T21566] kstrdup_const+0x51/0x90 [ 1565.953613][T21566] __kernfs_new_node+0x47/0x630 [ 1565.958431][T21566] ? bdi_register+0x80/0xa0 [ 1565.962903][T21566] ? bdi_register_owner+0x56/0xf0 [ 1565.967905][T21566] ? loop_add+0x554/0x710 [ 1565.972200][T21566] ? loop_control_ioctl+0x468/0x680 [ 1565.977365][T21566] ? do_vfs_ioctl+0x6fb/0x15b0 [ 1565.982093][T21566] ? __x64_sys_ioctl+0xd4/0x110 [ 1565.986910][T21566] ? do_syscall_64+0xcb/0x1e0 [ 1565.991555][T21566] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1565.997600][T21566] kernfs_create_dir_ns+0x90/0x220 [ 1566.002684][T21566] sysfs_create_dir_ns+0x14e/0x2f0 [ 1566.007811][T21566] kobject_add_internal+0x595/0xbd0 [ 1566.012984][T21566] kobject_add+0x100/0x1a0 [ 1566.017373][T21566] ? get_device_parent+0x2cd/0x430 [ 1566.022456][T21566] device_add+0x417/0x1820 [ 1566.026843][T21566] device_create_vargs+0x1b8/0x210 [ 1566.031922][T21566] device_create+0x86/0xb0 [ 1566.036306][T21566] ? vsnprintf+0x1a07/0x1aa0 [ 1566.040868][T21566] bdi_register_va+0x89/0x5e0 [ 1566.045516][T21566] bdi_register+0x80/0xa0 [ 1566.049858][T21566] ? __device_add_disk+0x50a/0x1220 [ 1566.055074][T21566] bdi_register_owner+0x56/0xf0 [ 1566.059932][T21566] __device_add_disk+0x583/0x1220 [ 1566.064939][T21566] loop_add+0x554/0x710 [ 1566.069065][T21566] loop_control_ioctl+0x468/0x680 [ 1566.074059][T21566] ? xor_init+0x60/0x60 [ 1566.078186][T21566] do_vfs_ioctl+0x6fb/0x15b0 [ 1566.082747][T21566] __x64_sys_ioctl+0xd4/0x110 [ 1566.087390][T21566] do_syscall_64+0xcb/0x1e0 [ 1566.091861][T21566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1566.097719][T21566] RIP: 0033:0x7f2c46c0dae9 [ 1566.102102][T21566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.121676][T21566] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.130091][T21566] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1566.138034][T21566] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1566.145971][T21566] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.153911][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.161887][T21566] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1566.169891][T21566] kobject_add_internal failed for 7:11 (error: -12 parent: bdi) [ 1566.177608][T21566] ------------[ cut here ]------------ [ 1566.183045][T21566] WARNING: CPU: 1 PID: 21566 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1566.192111][T21566] Modules linked in: [ 1566.195978][T21566] CPU: 1 PID: 21566 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1566.207560][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.217590][T21566] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1566.223359][T21566] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1566.242931][T21566] RSP: 0018:ffff888192577ce8 EFLAGS: 00010246 [ 1566.248961][T21566] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1566.256897][T21566] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1566.264846][T21566] RBP: ffff8881ef1508e8 R08: ffffffff82147a3e R09: ffffed10324aeeda [ 1566.272789][T21566] R10: ffffed10324aeeda R11: 0000000000000000 R12: dffffc0000000000 [ 1566.280729][T21566] R13: 1ffff11033ab3c01 R14: 1ffff11033ab3c9d R15: ffff88819d59e000 [ 1566.288670][T21566] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1566.297566][T21566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1566.304128][T21566] CR2: 0000555555cc3b38 CR3: 0000000191866000 CR4: 00000000003406e0 [ 1566.312085][T21566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1566.320029][T21566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1566.327976][T21566] Call Trace: [ 1566.331244][T21566] loop_add+0x554/0x710 [ 1566.335373][T21566] loop_control_ioctl+0x468/0x680 [ 1566.340365][T21566] ? xor_init+0x60/0x60 [ 1566.344493][T21566] do_vfs_ioctl+0x6fb/0x15b0 [ 1566.349057][T21566] __x64_sys_ioctl+0xd4/0x110 [ 1566.353704][T21566] do_syscall_64+0xcb/0x1e0 [ 1566.358195][T21566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1566.364056][T21566] RIP: 0033:0x7f2c46c0dae9 [ 1566.368451][T21566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.388026][T21566] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.396412][T21566] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1566.404351][T21566] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1566.412301][T21566] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.420240][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.428179][T21566] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffffff800000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1566.436137][T21566] ---[ end trace dcabad1d1d3cdeaf ]--- 18:22:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 47) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1566.855296][T21576] loop3: p2 < > p3 p4 [ 1566.859543][T21576] loop3: p2 size 2 extends beyond EOD, truncated [ 1566.866619][T21576] loop3: p3 start 225 is beyond EOD, truncated [ 1566.872846][T21576] loop3: p4 start 201326592 is beyond EOD, truncated [ 1566.924519][T21577] FAULT_INJECTION: forcing a failure. [ 1566.924519][T21577] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.937142][T21577] CPU: 1 PID: 21577 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1566.948746][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.958774][T21577] Call Trace: [ 1566.962045][T21577] dump_stack+0x18e/0x1de [ 1566.966364][T21577] should_fail+0x5d8/0x740 [ 1566.970755][T21577] ? __kernfs_new_node+0x47/0x630 [ 1566.975749][T21577] should_failslab+0x5/0x20 [ 1566.980230][T21577] __kmalloc_track_caller+0x5d/0x2e0 [ 1566.985501][T21577] kstrdup_const+0x51/0x90 [ 1566.989889][T21577] __kernfs_new_node+0x47/0x630 [ 1566.994707][T21577] ? bdi_register+0x80/0xa0 [ 1566.999181][T21577] ? bdi_register_owner+0x56/0xf0 [ 1567.004175][T21577] ? loop_add+0x554/0x710 [ 1567.008478][T21577] ? loop_control_ioctl+0x468/0x680 [ 1567.013648][T21577] ? do_vfs_ioctl+0x6fb/0x15b0 [ 1567.018381][T21577] ? __x64_sys_ioctl+0xd4/0x110 [ 1567.023203][T21577] ? do_syscall_64+0xcb/0x1e0 [ 1567.027849][T21577] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1567.033890][T21577] kernfs_create_dir_ns+0x90/0x220 [ 1567.038974][T21577] sysfs_create_dir_ns+0x14e/0x2f0 [ 1567.044060][T21577] kobject_add_internal+0x595/0xbd0 [ 1567.049231][T21577] kobject_add+0x100/0x1a0 [ 1567.053620][T21577] ? get_device_parent+0x2cd/0x430 [ 1567.058700][T21577] device_add+0x417/0x1820 [ 1567.063090][T21577] device_create_vargs+0x1b8/0x210 [ 1567.068171][T21577] device_create+0x86/0xb0 [ 1567.072557][T21577] ? vsnprintf+0x1a07/0x1aa0 [ 1567.077120][T21577] bdi_register_va+0x89/0x5e0 [ 1567.081777][T21577] bdi_register+0x80/0xa0 [ 1567.086077][T21577] ? __device_add_disk+0x50a/0x1220 [ 1567.091245][T21577] bdi_register_owner+0x56/0xf0 [ 1567.096069][T21577] __device_add_disk+0x583/0x1220 [ 1567.101068][T21577] loop_add+0x554/0x710 [ 1567.105193][T21577] loop_control_ioctl+0x468/0x680 [ 1567.110190][T21577] ? xor_init+0x60/0x60 [ 1567.114317][T21577] do_vfs_ioctl+0x6fb/0x15b0 [ 1567.118889][T21577] __x64_sys_ioctl+0xd4/0x110 [ 1567.123538][T21577] do_syscall_64+0xcb/0x1e0 [ 1567.128014][T21577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1567.133875][T21577] RIP: 0033:0x7f2c46c0dae9 [ 1567.138262][T21577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.157979][T21577] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.166366][T21577] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1567.174320][T21577] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1567.182275][T21577] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.190230][T21577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.198180][T21577] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1567.206219][T21577] kobject_add_internal failed for 7:11 (error: -12 parent: bdi) [ 1567.213959][T21577] ------------[ cut here ]------------ [ 1567.219416][T21577] WARNING: CPU: 1 PID: 21577 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1567.228486][T21577] Modules linked in: [ 1567.232358][T21577] CPU: 1 PID: 21577 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1567.243946][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.253998][T21577] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1567.259774][T21577] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1567.279350][T21577] RSP: 0018:ffff888191e47ce8 EFLAGS: 00010246 [ 1567.285388][T21577] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1567.293330][T21577] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1567.301278][T21577] RBP: ffff8881ef150058 R08: ffffffff82147a3e R09: 0000000000000010 [ 1567.309222][T21577] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1567.317163][T21577] R13: 1ffff11034c6e601 R14: 1ffff11034c6e69d R15: ffff8881a6373000 [ 1567.325119][T21577] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1567.334018][T21577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1567.340573][T21577] CR2: 00007f524ca5b718 CR3: 00000001e0da8000 CR4: 00000000003406e0 [ 1567.348517][T21577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1567.356459][T21577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1567.364400][T21577] Call Trace: [ 1567.367675][T21577] loop_add+0x554/0x710 [ 1567.371804][T21577] loop_control_ioctl+0x468/0x680 [ 1567.376802][T21577] ? xor_init+0x60/0x60 [ 1567.380931][T21577] do_vfs_ioctl+0x6fb/0x15b0 [ 1567.385498][T21577] __x64_sys_ioctl+0xd4/0x110 [ 1567.390147][T21577] do_syscall_64+0xcb/0x1e0 [ 1567.394626][T21577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1567.400502][T21577] RIP: 0033:0x7f2c46c0dae9 [ 1567.404893][T21577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.424468][T21577] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.432849][T21577] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1567.440792][T21577] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1567.448735][T21577] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.456689][T21577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.464632][T21577] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 48) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1567.472590][T21577] ---[ end trace dcabad1d1d3cdeb0 ]--- [ 1567.485032][T21573] loop2: p2 < > p3 p4 [ 1567.489249][T21573] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.496183][T21573] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1567.503762][T21573] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1567.533860][ T155] loop2: p2 < > p3 p4 [ 1567.538020][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1567.544933][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1567.552471][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:13 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000d008000da55aa", 0x40, 0x1c0}]) [ 1567.594716][T21584] loop5: p2 < > p3 p4 [ 1567.598933][T21584] loop5: p2 size 2 extends beyond EOD, truncated [ 1567.606025][T21584] loop5: p3 start 225 is beyond EOD, truncated [ 1567.612294][T21584] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:13 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000a00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1567.643669][T21590] loop4: p2 < > p3 p4 [ 1567.647742][T21590] loop4: partition table partially beyond EOD, truncated [ 1567.654940][T21590] loop4: p2 start 65295 is beyond EOD, truncated [ 1567.661250][T21590] loop4: p3 start 225 is beyond EOD, truncated [ 1567.667420][T21590] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1567.687475][T21591] loop1: p2 < > p3 p4 [ 1567.691540][T21591] loop1: partition table partially beyond EOD, truncated [ 1567.699023][T21591] loop1: p2 start 2164260863 is beyond EOD, truncated [ 1567.705779][T21591] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1567.713356][T21591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1567.725056][T21596] FAULT_INJECTION: forcing a failure. [ 1567.725056][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.737715][T21596] CPU: 1 PID: 21596 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1567.749307][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.759333][T21596] Call Trace: [ 1567.762594][T21596] dump_stack+0x18e/0x1de [ 1567.766896][T21596] should_fail+0x5d8/0x740 [ 1567.771285][T21596] ? __kernfs_new_node+0x8b/0x630 [ 1567.776281][T21596] should_failslab+0x5/0x20 [ 1567.780754][T21596] kmem_cache_alloc+0x36/0x290 [ 1567.785530][T21596] ? kernfs_activate+0x3fc/0x420 [ 1567.790437][T21596] __kernfs_new_node+0x8b/0x630 [ 1567.795258][T21596] ? kernfs_create_dir_ns+0x1df/0x220 [ 1567.800595][T21596] kernfs_new_node+0x95/0x160 [ 1567.805253][T21596] __kernfs_create_file+0x45/0x260 [ 1567.810344][T21596] sysfs_add_file_mode_ns+0x293/0x340 [ 1567.815685][T21596] sysfs_create_file_ns+0x146/0x230 [ 1567.820851][T21596] device_add+0x5d7/0x1820 [ 1567.825237][T21596] device_create_vargs+0x1b8/0x210 [ 1567.830318][T21596] device_create+0x86/0xb0 [ 1567.834699][T21596] ? vsnprintf+0x1a07/0x1aa0 [ 1567.839306][T21596] bdi_register_va+0x89/0x5e0 [ 1567.843950][T21596] bdi_register+0x80/0xa0 [ 1567.848247][T21596] ? __device_add_disk+0x50a/0x1220 [ 1567.853413][T21596] bdi_register_owner+0x56/0xf0 [ 1567.858235][T21596] __device_add_disk+0x583/0x1220 [ 1567.863236][T21596] loop_add+0x554/0x710 [ 1567.867357][T21596] loop_control_ioctl+0x468/0x680 [ 1567.872350][T21596] ? xor_init+0x60/0x60 [ 1567.876476][T21596] do_vfs_ioctl+0x6fb/0x15b0 [ 1567.881040][T21596] __x64_sys_ioctl+0xd4/0x110 [ 1567.885686][T21596] do_syscall_64+0xcb/0x1e0 [ 1567.890158][T21596] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1567.896022][T21596] RIP: 0033:0x7f2c46c0dae9 [ 1567.900403][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.920005][T21596] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.928379][T21596] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1567.936317][T21596] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1567.944263][T21596] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.952205][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.960144][T21596] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1567.968480][T21596] ------------[ cut here ]------------ [ 1567.973930][T21596] WARNING: CPU: 1 PID: 21596 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1567.983116][T21596] Modules linked in: [ 1567.986992][T21596] CPU: 1 PID: 21596 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1567.998590][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.008628][T21596] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1568.014403][T21596] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1568.033980][T21596] RSP: 0018:ffff8881985d7ce8 EFLAGS: 00010246 [ 1568.040020][T21596] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1568.047960][T21596] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1568.055899][T21596] RBP: ffff8881ef151178 R08: ffffffff82147a3e R09: 0000000000000010 [ 1568.063837][T21596] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1568.071775][T21596] R13: 1ffff11035228001 R14: 1ffff1103522809d R15: ffff8881a9140000 [ 1568.079716][T21596] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1568.088612][T21596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.095165][T21596] CR2: 00007f2c44942718 CR3: 0000000192b16000 CR4: 00000000003406e0 [ 1568.103105][T21596] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1568.111047][T21596] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1568.119028][T21596] Call Trace: [ 1568.122336][T21596] loop_add+0x554/0x710 [ 1568.126464][T21596] loop_control_ioctl+0x468/0x680 [ 1568.131456][T21596] ? xor_init+0x60/0x60 [ 1568.135579][T21596] do_vfs_ioctl+0x6fb/0x15b0 [ 1568.140139][T21596] __x64_sys_ioctl+0xd4/0x110 [ 1568.144781][T21596] do_syscall_64+0xcb/0x1e0 [ 1568.149254][T21596] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1568.155114][T21596] RIP: 0033:0x7f2c46c0dae9 [ 1568.159497][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.179067][T21596] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1568.187446][T21596] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1568.195387][T21596] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1568.203335][T21596] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.211283][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.219222][T21596] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1568.227177][T21596] ---[ end trace dcabad1d1d3cdeb1 ]--- 18:22:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 49) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000000a000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:13 executing program 5: syz_read_part_table(0x48, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000098a0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1568.452142][ T155] loop5: p2 < > p3 p4 [ 1568.456322][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1568.463004][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1568.469171][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1568.575360][T21708] FAULT_INJECTION: forcing a failure. [ 1568.575360][T21708] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.587996][T21708] CPU: 0 PID: 21708 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1568.599621][T21708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.609645][T21708] Call Trace: [ 1568.612910][T21708] dump_stack+0x18e/0x1de [ 1568.617210][T21708] should_fail+0x5d8/0x740 [ 1568.621596][T21708] ? __kernfs_new_node+0x8b/0x630 [ 1568.626587][T21708] should_failslab+0x5/0x20 [ 1568.631056][T21708] kmem_cache_alloc+0x36/0x290 [ 1568.635788][T21708] __kernfs_new_node+0x8b/0x630 [ 1568.640608][T21708] ? mutex_unlock+0x19/0x40 [ 1568.645122][T21708] ? kernfs_add_one+0x49e/0x5c0 [ 1568.649982][T21708] ? __kernfs_create_file+0x1f1/0x260 [ 1568.655322][T21708] kernfs_new_node+0x95/0x160 [ 1568.659968][T21708] kernfs_create_link+0x9c/0x1f0 [ 1568.664913][T21708] sysfs_do_create_link_sd+0x85/0x100 [ 1568.670252][T21708] device_add+0x6dc/0x1820 [ 1568.674651][T21708] device_create_vargs+0x1b8/0x210 [ 1568.679736][T21708] device_create+0x86/0xb0 [ 1568.684138][T21708] ? vsnprintf+0x1a07/0x1aa0 [ 1568.688699][T21708] bdi_register_va+0x89/0x5e0 [ 1568.693352][T21708] bdi_register+0x80/0xa0 [ 1568.697651][T21708] ? __device_add_disk+0x50a/0x1220 [ 1568.702815][T21708] bdi_register_owner+0x56/0xf0 [ 1568.707633][T21708] __device_add_disk+0x583/0x1220 [ 1568.712642][T21708] loop_add+0x554/0x710 [ 1568.716765][T21708] loop_control_ioctl+0x468/0x680 [ 1568.721756][T21708] ? xor_init+0x60/0x60 [ 1568.725878][T21708] do_vfs_ioctl+0x6fb/0x15b0 [ 1568.730439][T21708] __x64_sys_ioctl+0xd4/0x110 [ 1568.735081][T21708] do_syscall_64+0xcb/0x1e0 [ 1568.739557][T21708] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1568.745416][T21708] RIP: 0033:0x7f2c46c0dae9 [ 1568.749800][T21708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.769369][T21708] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1568.777749][T21708] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1568.785691][T21708] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1568.793631][T21708] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.801571][T21708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.809510][T21708] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1568.818363][T21708] ------------[ cut here ]------------ [ 1568.823832][T21708] WARNING: CPU: 0 PID: 21708 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1568.832902][T21708] Modules linked in: [ 1568.836776][T21708] CPU: 0 PID: 21708 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1568.848362][T21708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.858398][T21708] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1568.864172][T21708] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1568.883749][T21708] RSP: 0018:ffff888191f0fce8 EFLAGS: 00010246 [ 1568.889801][T21708] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1568.897746][T21708] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1568.905693][T21708] RBP: ffff8881eed108e8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1568.913632][T21708] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1568.921569][T21708] R13: 1ffff11032e54601 R14: 1ffff11032e5469d R15: ffff8881972a3000 [ 1568.929513][T21708] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1568.938408][T21708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.944958][T21708] CR2: 00007f2c44942718 CR3: 0000000195a95000 CR4: 00000000003406f0 [ 1568.952900][T21708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1568.960841][T21708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1568.968776][T21708] Call Trace: [ 1568.972043][T21708] loop_add+0x554/0x710 [ 1568.976168][T21708] loop_control_ioctl+0x468/0x680 [ 1568.981160][T21708] ? xor_init+0x60/0x60 [ 1568.985294][T21708] do_vfs_ioctl+0x6fb/0x15b0 [ 1568.989867][T21708] __x64_sys_ioctl+0xd4/0x110 [ 1568.994514][T21708] do_syscall_64+0xcb/0x1e0 [ 1568.998986][T21708] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1569.004851][T21708] RIP: 0033:0x7f2c46c0dae9 [ 1569.009234][T21708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.028807][T21708] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.037188][T21708] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1569.045128][T21708] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1569.053072][T21708] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.061012][T21708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1569.068952][T21708] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1569.076901][T21708] ---[ end trace dcabad1d1d3cdeb2 ]--- 18:22:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 50) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1569.184246][T21706] loop2: p2 < > p3 p4 [ 1569.188679][T21706] loop2: p2 size 2 extends beyond EOD, truncated [ 1569.195442][T21706] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1569.202979][T21706] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1569.274471][T21704] loop3: p2 < > p3 p4 [ 1569.278618][T21704] loop3: p2 size 2 extends beyond EOD, truncated [ 1569.285689][T21704] loop3: p3 start 225 is beyond EOD, truncated [ 1569.291820][T21704] loop3: p4 start 218103808 is beyond EOD, truncated [ 1569.305070][T21722] FAULT_INJECTION: forcing a failure. [ 1569.305070][T21722] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.317772][T21722] CPU: 0 PID: 21722 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1569.329371][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.339419][T21722] Call Trace: [ 1569.339443][T21722] dump_stack+0x18e/0x1de [ 1569.347000][T21722] should_fail+0x5d8/0x740 [ 1569.351390][T21722] ? __kernfs_new_node+0x8b/0x630 [ 1569.356393][T21722] should_failslab+0x5/0x20 [ 1569.360871][T21722] kmem_cache_alloc+0x36/0x290 [ 1569.365606][T21722] __kernfs_new_node+0x8b/0x630 [ 1569.370424][T21722] ? mutex_unlock+0x19/0x40 [ 1569.374895][T21722] ? kernfs_add_one+0x49e/0x5c0 [ 1569.379717][T21722] ? __kernfs_create_file+0x1f1/0x260 [ 1569.385059][T21722] kernfs_new_node+0x95/0x160 [ 1569.389767][T21722] kernfs_create_link+0x9c/0x1f0 [ 1569.394683][T21722] sysfs_do_create_link_sd+0x85/0x100 [ 1569.400032][T21722] device_add+0x6dc/0x1820 [ 1569.404417][T21722] device_create_vargs+0x1b8/0x210 [ 1569.409495][T21722] device_create+0x86/0xb0 [ 1569.413875][T21722] ? vsnprintf+0x1a07/0x1aa0 [ 1569.418434][T21722] bdi_register_va+0x89/0x5e0 [ 1569.423080][T21722] bdi_register+0x80/0xa0 [ 1569.427382][T21722] ? __device_add_disk+0x50a/0x1220 [ 1569.432565][T21722] bdi_register_owner+0x56/0xf0 [ 1569.437395][T21722] __device_add_disk+0x583/0x1220 [ 1569.442398][T21722] loop_add+0x554/0x710 [ 1569.446523][T21722] loop_control_ioctl+0x468/0x680 [ 1569.451518][T21722] ? xor_init+0x60/0x60 [ 1569.455642][T21722] do_vfs_ioctl+0x6fb/0x15b0 [ 1569.460202][T21722] __x64_sys_ioctl+0xd4/0x110 [ 1569.464858][T21722] do_syscall_64+0xcb/0x1e0 [ 1569.469342][T21722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1569.475204][T21722] RIP: 0033:0x7f2c46c0dae9 [ 1569.479591][T21722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.499164][T21722] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.507543][T21722] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1569.515492][T21722] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1569.523476][T21722] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.531415][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1569.539360][T21722] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1569.548247][T21722] ------------[ cut here ]------------ [ 1569.553702][T21722] WARNING: CPU: 0 PID: 21722 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1569.562775][T21722] Modules linked in: [ 1569.566642][T21722] CPU: 0 PID: 21722 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1569.578226][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.588257][T21722] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1569.594026][T21722] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1569.613596][T21722] RSP: 0018:ffff8881e68e7ce8 EFLAGS: 00010246 [ 1569.619628][T21722] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1569.627568][T21722] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1569.635510][T21722] RBP: ffff8881eed12298 R08: ffffffff82147a3e R09: 0000000000000010 [ 1569.643452][T21722] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1569.651402][T21722] R13: 1ffff11032e38c01 R14: 1ffff11032e38c9d R15: ffff8881971c6000 [ 1569.659343][T21722] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1569.668235][T21722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1569.674784][T21722] CR2: 0000000000000000 CR3: 0000000192b17000 CR4: 00000000003406f0 [ 1569.682724][T21722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1569.690661][T21722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1569.698598][T21722] Call Trace: [ 1569.701865][T21722] loop_add+0x554/0x710 [ 1569.705992][T21722] loop_control_ioctl+0x468/0x680 [ 1569.710984][T21722] ? xor_init+0x60/0x60 [ 1569.715108][T21722] do_vfs_ioctl+0x6fb/0x15b0 [ 1569.719668][T21722] __x64_sys_ioctl+0xd4/0x110 [ 1569.724315][T21722] do_syscall_64+0xcb/0x1e0 [ 1569.728787][T21722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1569.734646][T21722] RIP: 0033:0x7f2c46c0dae9 [ 1569.739027][T21722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.758600][T21722] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.766979][T21722] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 18:22:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 51) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1569.774926][T21722] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1569.782876][T21722] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.790816][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1569.798756][T21722] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1569.806716][T21722] ---[ end trace dcabad1d1d3cdeb3 ]--- 18:22:15 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000000e008000da55aa", 0x40, 0x1c0}]) 18:22:15 executing program 5: syz_read_part_table(0x4c, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:15 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000b00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1569.934054][T21723] loop1: p2 < > p3 p4 [ 1569.938157][T21723] loop1: partition table partially beyond EOD, truncated [ 1569.945487][T21723] loop1: p2 start 2315845632 is beyond EOD, truncated [ 1569.952250][T21723] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1569.960090][T21723] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1570.024301][T21724] loop4: p2 < > p3 p4 [ 1570.028384][T21724] loop4: partition table partially beyond EOD, truncated [ 1570.035533][T21724] loop4: p2 start 655360 is beyond EOD, truncated [ 1570.041951][T21724] loop4: p3 start 225 is beyond EOD, truncated [ 1570.048122][T21724] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffffff970000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffff0f000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1570.254637][T21838] FAULT_INJECTION: forcing a failure. [ 1570.254637][T21838] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.263740][T21836] loop2: p2 < > p3 p4 [ 1570.267287][T21838] CPU: 1 PID: 21838 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1570.271523][T21836] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.282913][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.282916][T21838] Call Trace: [ 1570.282934][T21838] dump_stack+0x18e/0x1de [ 1570.282946][T21838] should_fail+0x5d8/0x740 [ 1570.282957][T21838] ? __kernfs_new_node+0x8b/0x630 [ 1570.282972][T21838] should_failslab+0x5/0x20 [ 1570.289900][T21836] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1570.299295][T21838] kmem_cache_alloc+0x36/0x290 [ 1570.299307][T21838] __kernfs_new_node+0x8b/0x630 [ 1570.299314][T21838] ? mutex_unlock+0x19/0x40 [ 1570.299327][T21838] ? kernfs_add_one+0x49e/0x5c0 [ 1570.303436][T21836] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1570.306888][T21838] ? __kernfs_create_file+0x1f1/0x260 [ 1570.306898][T21838] kernfs_new_node+0x95/0x160 [ 1570.306910][T21838] kernfs_create_link+0x9c/0x1f0 [ 1570.368578][T21838] sysfs_do_create_link_sd+0x85/0x100 [ 1570.373918][T21838] device_add+0x6dc/0x1820 [ 1570.378307][T21838] device_create_vargs+0x1b8/0x210 [ 1570.383389][T21838] device_create+0x86/0xb0 [ 1570.387771][T21838] ? vsnprintf+0x1a07/0x1aa0 [ 1570.392330][T21838] bdi_register_va+0x89/0x5e0 [ 1570.396975][T21838] bdi_register+0x80/0xa0 [ 1570.401280][T21838] ? __device_add_disk+0x50a/0x1220 [ 1570.406446][T21838] bdi_register_owner+0x56/0xf0 [ 1570.411266][T21838] __device_add_disk+0x583/0x1220 [ 1570.416264][T21838] loop_add+0x554/0x710 [ 1570.420388][T21838] loop_control_ioctl+0x468/0x680 [ 1570.425380][T21838] ? xor_init+0x60/0x60 [ 1570.429506][T21838] do_vfs_ioctl+0x6fb/0x15b0 [ 1570.434073][T21838] __x64_sys_ioctl+0xd4/0x110 [ 1570.438731][T21838] do_syscall_64+0xcb/0x1e0 [ 1570.443208][T21838] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1570.449071][T21838] RIP: 0033:0x7f2c46c0dae9 [ 1570.453453][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.473027][T21838] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1570.481417][T21838] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1570.489367][T21838] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1570.497318][T21838] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.505266][T21838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1570.513210][T21838] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1570.521580][T21838] ------------[ cut here ]------------ [ 1570.527041][T21838] WARNING: CPU: 1 PID: 21838 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1570.536116][T21838] Modules linked in: [ 1570.539981][T21838] CPU: 1 PID: 21838 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1570.551565][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.561616][T21838] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1570.567394][T21838] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1570.586973][T21838] RSP: 0018:ffff8881dd397ce8 EFLAGS: 00010246 [ 1570.593019][T21838] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1570.600972][T21838] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1570.608913][T21838] RBP: ffff8881ef152b28 R08: ffffffff82147a3e R09: 0000000000000010 [ 1570.616854][T21838] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1570.624796][T21838] R13: 1ffff110327c9401 R14: 1ffff110327c949d R15: ffff888193e4a000 [ 1570.632739][T21838] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1570.641649][T21838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1570.648204][T21838] CR2: 00007f2c44942718 CR3: 0000000193601000 CR4: 00000000003406e0 [ 1570.656155][T21838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1570.664105][T21838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1570.672045][T21838] Call Trace: [ 1570.675309][T21838] loop_add+0x554/0x710 [ 1570.679433][T21838] loop_control_ioctl+0x468/0x680 [ 1570.684693][T21838] ? xor_init+0x60/0x60 [ 1570.688828][T21838] do_vfs_ioctl+0x6fb/0x15b0 [ 1570.693410][T21838] __x64_sys_ioctl+0xd4/0x110 [ 1570.698067][T21838] do_syscall_64+0xcb/0x1e0 [ 1570.702538][T21838] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1570.708401][T21838] RIP: 0033:0x7f2c46c0dae9 [ 1570.712786][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.732358][T21838] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1570.740735][T21838] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1570.748678][T21838] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1570.756616][T21838] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.764554][T21838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1570.772499][T21838] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1570.780447][T21838] ---[ end trace dcabad1d1d3cdeb4 ]--- 18:22:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 52) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1570.828385][ T155] loop2: p2 < > p3 p4 [ 1570.838645][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1570.845945][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1570.853462][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1570.864295][T21844] loop5: p2 < > p3 p4 [ 1570.868467][T21844] loop5: p2 size 2 extends beyond EOD, truncated [ 1570.875388][T21844] loop5: p3 start 225 is beyond EOD, truncated [ 1570.881561][T21844] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1570.913936][T21842] loop3: p2 < > p3 p4 [ 1570.918118][T21842] loop3: p2 size 2 extends beyond EOD, truncated [ 1570.925152][T21842] loop3: p3 start 225 is beyond EOD, truncated [ 1570.931364][T21842] loop3: p4 start 234881024 is beyond EOD, truncated [ 1570.940214][T21849] loop4: p2 < > p3 p4 [ 1570.941715][T21856] FAULT_INJECTION: forcing a failure. [ 1570.941715][T21856] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.944362][T21849] loop4: partition table partially beyond EOD, truncated [ 1570.956968][T21856] CPU: 0 PID: 21856 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1570.956979][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.985845][T21856] Call Trace: [ 1570.989117][T21856] dump_stack+0x18e/0x1de [ 1570.993420][T21856] should_fail+0x5d8/0x740 [ 1570.997812][T21856] ? __kernfs_new_node+0x47/0x630 [ 1571.002809][T21856] should_failslab+0x5/0x20 [ 1571.007282][T21856] __kmalloc_track_caller+0x5d/0x2e0 [ 1571.012543][T21856] kstrdup_const+0x51/0x90 [ 1571.016934][T21856] __kernfs_new_node+0x47/0x630 [ 1571.021756][T21856] ? mutex_lock+0x6c/0xc0 [ 1571.026061][T21856] ? kernfs_activate+0x3fc/0x420 [ 1571.030972][T21856] kernfs_new_node+0x95/0x160 [ 1571.035622][T21856] kernfs_create_link+0x9c/0x1f0 [ 1571.040532][T21856] sysfs_do_create_link_sd+0x85/0x100 [ 1571.045896][T21856] device_add+0x93a/0x1820 [ 1571.050289][T21856] device_create_vargs+0x1b8/0x210 [ 1571.055372][T21856] device_create+0x86/0xb0 [ 1571.059756][T21856] ? vsnprintf+0x1a07/0x1aa0 [ 1571.064320][T21856] bdi_register_va+0x89/0x5e0 [ 1571.068969][T21856] bdi_register+0x80/0xa0 [ 1571.073270][T21856] ? apic_timer_interrupt+0xa/0x20 [ 1571.078352][T21856] ? __device_add_disk+0x50a/0x1220 [ 1571.083523][T21856] bdi_register_owner+0x56/0xf0 [ 1571.088346][T21856] __device_add_disk+0x583/0x1220 [ 1571.093347][T21856] loop_add+0x554/0x710 [ 1571.097473][T21856] loop_control_ioctl+0x468/0x680 [ 1571.102471][T21856] ? xor_init+0x60/0x60 [ 1571.106611][T21856] do_vfs_ioctl+0x6fb/0x15b0 [ 1571.111177][T21856] __x64_sys_ioctl+0xd4/0x110 [ 1571.115837][T21856] do_syscall_64+0xcb/0x1e0 [ 1571.120315][T21856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1571.126190][T21856] RIP: 0033:0x7f2c46c0dae9 [ 1571.130579][T21856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.150156][T21856] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1571.158538][T21856] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1571.166481][T21856] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1571.174425][T21856] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.182367][T21856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.190323][T21856] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1571.199211][T21856] ------------[ cut here ]------------ [ 1571.204672][T21856] WARNING: CPU: 0 PID: 21856 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1571.213752][T21856] Modules linked in: [ 1571.213766][T21856] CPU: 0 PID: 21856 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1571.213770][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1571.213783][T21856] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1571.213791][T21856] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1571.213794][T21856] RSP: 0018:ffff8881945e7ce8 EFLAGS: 00010246 [ 1571.213800][T21856] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1571.213805][T21856] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1571.213809][T21856] RBP: ffff8881eed14d68 R08: ffffffff82147a3e R09: 0000000000000010 [ 1571.213813][T21856] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1571.213818][T21856] R13: 1ffff11032c4ea01 R14: 1ffff11032c4ea9d R15: ffff888196275000 [ 1571.213824][T21856] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1571.213829][T21856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.213833][T21856] CR2: 00007fa55d23d918 CR3: 0000000195648000 CR4: 00000000003406f0 [ 1571.213840][T21856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1571.213844][T21856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1571.213846][T21856] Call Trace: [ 1571.213860][T21856] loop_add+0x554/0x710 [ 1571.213869][T21856] loop_control_ioctl+0x468/0x680 [ 1571.213876][T21856] ? xor_init+0x60/0x60 [ 1571.213885][T21856] do_vfs_ioctl+0x6fb/0x15b0 [ 1571.213898][T21856] __x64_sys_ioctl+0xd4/0x110 [ 1571.213907][T21856] do_syscall_64+0xcb/0x1e0 [ 1571.213916][T21856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1571.213922][T21856] RIP: 0033:0x7f2c46c0dae9 [ 1571.213928][T21856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.213932][T21856] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1571.213939][T21856] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1571.213942][T21856] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1571.213946][T21856] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.213950][T21856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.213954][T21856] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1571.213965][T21856] ---[ end trace dcabad1d1d3cdeb5 ]--- [ 1571.229207][T21849] loop4: p2 start 1048575 is beyond EOD, truncated [ 1571.473434][T21849] loop4: p3 start 225 is beyond EOD, truncated [ 1571.479673][T21849] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 53) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:17 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000011008000da55aa", 0x40, 0x1c0}]) 18:22:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008000000009a0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:17 executing program 5: syz_read_part_table(0x60, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000010000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:17 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000c00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1571.785136][T21965] FAULT_INJECTION: forcing a failure. [ 1571.785136][T21965] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.797921][T21965] CPU: 1 PID: 21965 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1571.809516][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1571.819539][T21965] Call Trace: [ 1571.822804][T21965] dump_stack+0x18e/0x1de [ 1571.827103][T21965] should_fail+0x5d8/0x740 [ 1571.831492][T21965] ? __kernfs_new_node+0x8b/0x630 [ 1571.836483][T21965] should_failslab+0x5/0x20 [ 1571.840958][T21965] kmem_cache_alloc+0x36/0x290 [ 1571.845699][T21965] __kernfs_new_node+0x8b/0x630 [ 1571.850527][T21965] ? mutex_unlock+0x19/0x40 [ 1571.855012][T21965] ? kernfs_xattr_get+0x81/0x90 [ 1571.859833][T21965] ? selinux_kernfs_init_security+0x12d/0x720 [ 1571.865872][T21965] kernfs_new_node+0x95/0x160 [ 1571.870523][T21965] __kernfs_create_file+0x45/0x260 [ 1571.875604][T21965] sysfs_add_file_mode_ns+0x293/0x340 [ 1571.880947][T21965] internal_create_group+0x486/0xd70 [ 1571.886203][T21965] sysfs_create_groups+0x5d/0x130 [ 1571.891195][T21965] device_add+0x9fa/0x1820 [ 1571.895581][T21965] device_create_vargs+0x1b8/0x210 [ 1571.900660][T21965] device_create+0x86/0xb0 [ 1571.905042][T21965] ? vsnprintf+0x1a07/0x1aa0 [ 1571.909604][T21965] bdi_register_va+0x89/0x5e0 [ 1571.914250][T21965] bdi_register+0x80/0xa0 [ 1571.918985][T21965] ? __device_add_disk+0x50a/0x1220 [ 1571.924167][T21965] bdi_register_owner+0x56/0xf0 [ 1571.928989][T21965] __device_add_disk+0x583/0x1220 [ 1571.933982][T21965] loop_add+0x554/0x710 [ 1571.938112][T21965] loop_control_ioctl+0x468/0x680 [ 1571.943123][T21965] ? xor_init+0x60/0x60 [ 1571.947250][T21965] do_vfs_ioctl+0x6fb/0x15b0 [ 1571.951808][T21965] __x64_sys_ioctl+0xd4/0x110 [ 1571.956455][T21965] do_syscall_64+0xcb/0x1e0 [ 1571.960929][T21965] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1571.966789][T21965] RIP: 0033:0x7f2c46c0dae9 [ 1571.971172][T21965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.990744][T21965] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1571.999117][T21965] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1572.007055][T21965] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1572.015038][T21965] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.022982][T21965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1572.030926][T21965] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1572.039296][T21965] ------------[ cut here ]------------ [ 1572.044758][T21965] WARNING: CPU: 1 PID: 21965 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1572.044760][T21965] Modules linked in: [ 1572.044773][T21965] CPU: 1 PID: 21965 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1572.044778][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.044789][T21965] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1572.044797][T21965] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1572.044803][T21965] RSP: 0018:ffff8881f0f37ce8 EFLAGS: 00010246 [ 1572.044810][T21965] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1572.044821][T21965] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1572.126610][T21965] RBP: ffff8881ef156718 R08: ffffffff82147a3e R09: 0000000000000010 [ 1572.134553][T21965] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1572.142494][T21965] R13: 1ffff1103dae1601 R14: 1ffff1103dae169d R15: ffff8881ed70b000 [ 1572.150444][T21965] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1572.159341][T21965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1572.165895][T21965] CR2: 00007f2c44963718 CR3: 0000000193601000 CR4: 00000000003406e0 [ 1572.173838][T21965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1572.181776][T21965] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1572.189710][T21965] Call Trace: [ 1572.192978][T21965] loop_add+0x554/0x710 [ 1572.197107][T21965] loop_control_ioctl+0x468/0x680 [ 1572.202101][T21965] ? xor_init+0x60/0x60 [ 1572.206224][T21965] do_vfs_ioctl+0x6fb/0x15b0 [ 1572.210785][T21965] __x64_sys_ioctl+0xd4/0x110 [ 1572.215432][T21965] do_syscall_64+0xcb/0x1e0 [ 1572.219907][T21965] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1572.225816][T21965] RIP: 0033:0x7f2c46c0dae9 [ 1572.230201][T21965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.249816][T21965] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.258196][T21965] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1572.266144][T21965] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1572.274085][T21965] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.282024][T21965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1572.289964][T21965] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1572.298272][T21965] ---[ end trace dcabad1d1d3cdeb6 ]--- 18:22:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 54) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1572.457838][T21967] loop3: p2 < > p3 p4 [ 1572.462213][T21967] loop3: p2 size 2 extends beyond EOD, truncated [ 1572.469113][T21967] loop3: p3 start 225 is beyond EOD, truncated [ 1572.475413][T21967] loop3: p4 start 285212672 is beyond EOD, truncated [ 1572.484240][T21983] FAULT_INJECTION: forcing a failure. [ 1572.484240][T21983] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.496843][T21983] CPU: 1 PID: 21983 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1572.508439][T21983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.518468][T21983] Call Trace: [ 1572.521740][T21983] dump_stack+0x18e/0x1de [ 1572.526044][T21983] should_fail+0x5d8/0x740 [ 1572.530437][T21983] ? __kernfs_new_node+0x8b/0x630 [ 1572.535439][T21983] should_failslab+0x5/0x20 [ 1572.539918][T21983] kmem_cache_alloc+0x36/0x290 [ 1572.544655][T21983] __kernfs_new_node+0x8b/0x630 [ 1572.549481][T21983] ? mutex_lock+0x6c/0xc0 [ 1572.553783][T21983] ? kernfs_activate+0x3fc/0x420 [ 1572.558692][T21983] kernfs_new_node+0x95/0x160 [ 1572.563349][T21983] __kernfs_create_file+0x45/0x260 [ 1572.568431][T21983] sysfs_add_file_mode_ns+0x293/0x340 [ 1572.573777][T21983] internal_create_group+0x486/0xd70 [ 1572.579038][T21983] sysfs_create_groups+0x5d/0x130 [ 1572.584038][T21983] device_add+0x9fa/0x1820 [ 1572.588447][T21983] device_create_vargs+0x1b8/0x210 [ 1572.593533][T21983] device_create+0x86/0xb0 [ 1572.597939][T21983] ? vsnprintf+0x1a07/0x1aa0 [ 1572.602501][T21983] bdi_register_va+0x89/0x5e0 [ 1572.607161][T21983] bdi_register+0x80/0xa0 [ 1572.611461][T21983] ? __device_add_disk+0x50a/0x1220 [ 1572.616632][T21983] bdi_register_owner+0x56/0xf0 [ 1572.621453][T21983] __device_add_disk+0x583/0x1220 [ 1572.626452][T21983] loop_add+0x554/0x710 [ 1572.630582][T21983] loop_control_ioctl+0x468/0x680 [ 1572.635579][T21983] ? xor_init+0x60/0x60 [ 1572.639706][T21983] do_vfs_ioctl+0x6fb/0x15b0 [ 1572.644272][T21983] __x64_sys_ioctl+0xd4/0x110 [ 1572.648933][T21983] do_syscall_64+0xcb/0x1e0 [ 1572.653409][T21983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1572.659270][T21983] RIP: 0033:0x7f2c46c0dae9 [ 1572.663659][T21983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.683231][T21983] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.691957][T21983] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1572.699988][T21983] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1572.707932][T21983] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.715877][T21983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1572.723824][T21983] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1572.732159][T21983] ------------[ cut here ]------------ [ 1572.737614][T21983] WARNING: CPU: 1 PID: 21983 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1572.746686][T21983] Modules linked in: [ 1572.750569][T21983] CPU: 1 PID: 21983 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1572.762167][T21983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.772203][T21983] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1572.777980][T21983] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1572.797555][T21983] RSP: 0018:ffff888191b17ce8 EFLAGS: 00010246 [ 1572.803591][T21983] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1572.811532][T21983] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1572.819478][T21983] RBP: ffff8881ef154d68 R08: ffffffff82147a3e R09: 0000000000000010 [ 1572.827432][T21983] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1572.835386][T21983] R13: 1ffff1103e1e6401 R14: 1ffff1103e1e649d R15: ffff8881f0f32000 [ 1572.843331][T21983] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1572.852239][T21983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1572.858791][T21983] CR2: 0000000000000000 CR3: 0000000197ac9000 CR4: 00000000003406e0 [ 1572.866738][T21983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1572.874680][T21983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1572.882620][T21983] Call Trace: [ 1572.885903][T21983] loop_add+0x554/0x710 [ 1572.890032][T21983] loop_control_ioctl+0x468/0x680 [ 1572.895371][T21983] ? xor_init+0x60/0x60 [ 1572.899496][T21983] do_vfs_ioctl+0x6fb/0x15b0 [ 1572.904064][T21983] __x64_sys_ioctl+0xd4/0x110 [ 1572.908726][T21983] do_syscall_64+0xcb/0x1e0 [ 1572.913206][T21983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1572.919068][T21983] RIP: 0033:0x7f2c46c0dae9 [ 1572.923455][T21983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.943033][T21983] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.951411][T21983] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1572.959352][T21983] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1572.967297][T21983] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.975250][T21983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1572.983193][T21983] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1572.991146][T21983] ---[ end trace dcabad1d1d3cdeb7 ]--- [ 1572.997697][T21974] loop5: p2 < > p3 p4 [ 1573.003226][T21974] loop5: p2 size 2 extends beyond EOD, truncated [ 1573.010123][T21974] loop5: p3 start 225 is beyond EOD, truncated [ 1573.016358][T21974] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1573.024976][ T155] loop5: p2 < > p3 p4 [ 1573.029136][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1573.035962][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1573.042148][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1573.044407][T21975] loop2: p2 < > p3 p4 [ 1573.053755][T21975] loop2: p2 size 2 extends beyond EOD, truncated 18:22:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 55) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1573.060518][T21975] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1573.068168][T21975] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:18 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000012008000da55aa", 0x40, 0x1c0}]) [ 1573.164056][T21985] loop4: p2 < > p3 p4 [ 1573.168140][T21985] loop4: partition table partially beyond EOD, truncated [ 1573.175409][T21985] loop4: p2 start 1048576 is beyond EOD, truncated [ 1573.181883][T21985] loop4: p3 start 225 is beyond EOD, truncated [ 1573.188191][T21985] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:18 executing program 5: syz_read_part_table(0x68, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000090000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000a20000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:19 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000d00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1573.618457][T22098] FAULT_INJECTION: forcing a failure. [ 1573.618457][T22098] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.631178][T22098] CPU: 0 PID: 22098 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1573.642790][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.642793][T22098] Call Trace: [ 1573.642813][T22098] dump_stack+0x18e/0x1de [ 1573.642831][T22098] should_fail+0x5d8/0x740 [ 1573.664796][T22098] ? __kernfs_new_node+0x8b/0x630 [ 1573.669787][T22098] should_failslab+0x5/0x20 [ 1573.674260][T22098] kmem_cache_alloc+0x36/0x290 [ 1573.679036][T22098] __kernfs_new_node+0x8b/0x630 [ 1573.683855][T22098] ? mutex_lock+0x6c/0xc0 [ 1573.688152][T22098] ? kernfs_activate+0x3fc/0x420 [ 1573.693059][T22098] kernfs_new_node+0x95/0x160 [ 1573.697702][T22098] __kernfs_create_file+0x45/0x260 [ 1573.702783][T22098] sysfs_add_file_mode_ns+0x293/0x340 [ 1573.708131][T22098] internal_create_group+0x486/0xd70 [ 1573.713388][T22098] sysfs_create_groups+0x5d/0x130 [ 1573.718386][T22098] device_add+0x9fa/0x1820 [ 1573.722782][T22098] device_create_vargs+0x1b8/0x210 [ 1573.727862][T22098] device_create+0x86/0xb0 [ 1573.732249][T22098] ? vsnprintf+0x1a07/0x1aa0 [ 1573.736809][T22098] bdi_register_va+0x89/0x5e0 [ 1573.741456][T22098] bdi_register+0x80/0xa0 [ 1573.745763][T22098] ? __device_add_disk+0x50a/0x1220 [ 1573.750930][T22098] bdi_register_owner+0x56/0xf0 [ 1573.755755][T22098] __device_add_disk+0x583/0x1220 [ 1573.760759][T22098] loop_add+0x554/0x710 [ 1573.764886][T22098] loop_control_ioctl+0x468/0x680 [ 1573.769877][T22098] ? xor_init+0x60/0x60 [ 1573.774005][T22098] do_vfs_ioctl+0x6fb/0x15b0 [ 1573.778566][T22098] __x64_sys_ioctl+0xd4/0x110 [ 1573.783213][T22098] do_syscall_64+0xcb/0x1e0 [ 1573.787685][T22098] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1573.793545][T22098] RIP: 0033:0x7f2c46c0dae9 [ 1573.797928][T22098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.817500][T22098] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1573.825879][T22098] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1573.833820][T22098] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1573.841760][T22098] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.849706][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.857645][T22098] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1573.866643][T22098] ------------[ cut here ]------------ [ 1573.872103][T22098] WARNING: CPU: 0 PID: 22098 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1573.881170][T22098] Modules linked in: [ 1573.885049][T22098] CPU: 0 PID: 22098 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1573.896636][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.906676][T22098] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1573.912453][T22098] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1573.932023][T22098] RSP: 0018:ffff8881dacffce8 EFLAGS: 00010246 [ 1573.938067][T22098] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1573.946009][T22098] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1573.953951][T22098] RBP: ffff8881eed11a08 R08: ffffffff82147a3e R09: 0000000000000010 [ 1573.961891][T22098] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1573.969834][T22098] R13: 1ffff1103c844c01 R14: 1ffff1103c844c9d R15: ffff8881e4226000 [ 1573.977774][T22098] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1573.986667][T22098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1573.993266][T22098] CR2: 0000000020003540 CR3: 00000001b4129000 CR4: 00000000003406f0 [ 1574.001255][T22098] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1574.009201][T22098] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1574.017138][T22098] Call Trace: [ 1574.020406][T22098] loop_add+0x554/0x710 [ 1574.024540][T22098] loop_control_ioctl+0x468/0x680 [ 1574.029537][T22098] ? xor_init+0x60/0x60 [ 1574.033670][T22098] do_vfs_ioctl+0x6fb/0x15b0 [ 1574.038244][T22098] __x64_sys_ioctl+0xd4/0x110 [ 1574.042892][T22098] do_syscall_64+0xcb/0x1e0 [ 1574.047368][T22098] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1574.053233][T22098] RIP: 0033:0x7f2c46c0dae9 [ 1574.057628][T22098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1574.077213][T22098] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1574.085621][T22098] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1574.093570][T22098] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1574.101519][T22098] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1574.109459][T22098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.117398][T22098] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1574.125347][T22098] ---[ end trace dcabad1d1d3cdeb8 ]--- 18:22:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 56) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1574.214214][T22099] loop5: p2 < > p3 p4 [ 1574.218388][T22099] loop5: p2 size 2 extends beyond EOD, truncated [ 1574.225801][T22099] loop5: p3 start 225 is beyond EOD, truncated [ 1574.232018][T22099] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1574.257145][T22102] loop3: p2 < > p3 p4 [ 1574.258764][ T155] loop5: p2 < > p3 p4 [ 1574.261314][T22102] loop3: p2 size 2 extends beyond EOD, truncated [ 1574.265441][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1574.272238][T22115] FAULT_INJECTION: forcing a failure. [ 1574.272238][T22115] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.278523][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1574.290578][T22115] CPU: 1 PID: 22115 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1574.308288][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.318318][T22115] Call Trace: [ 1574.321604][T22115] dump_stack+0x18e/0x1de [ 1574.325908][T22115] should_fail+0x5d8/0x740 [ 1574.330301][T22115] ? __kernfs_new_node+0x8b/0x630 [ 1574.335297][T22115] should_failslab+0x5/0x20 [ 1574.339773][T22115] kmem_cache_alloc+0x36/0x290 [ 1574.344522][T22115] __kernfs_new_node+0x8b/0x630 [ 1574.349345][T22115] ? kernfs_add_one+0x49e/0x5c0 [ 1574.354173][T22115] kernfs_new_node+0x95/0x160 [ 1574.358824][T22115] __kernfs_create_file+0x45/0x260 [ 1574.363906][T22115] sysfs_add_file_mode_ns+0x293/0x340 [ 1574.369268][T22115] sysfs_create_file_ns+0x146/0x230 [ 1574.374441][T22115] device_add+0xbc7/0x1820 [ 1574.378833][T22115] device_create_vargs+0x1b8/0x210 [ 1574.383916][T22115] device_create+0x86/0xb0 [ 1574.388319][T22115] ? vsnprintf+0x1a07/0x1aa0 [ 1574.392887][T22115] bdi_register_va+0x89/0x5e0 [ 1574.397537][T22115] bdi_register+0x80/0xa0 [ 1574.401837][T22115] ? __device_add_disk+0x50a/0x1220 [ 1574.407006][T22115] bdi_register_owner+0x56/0xf0 [ 1574.411831][T22115] __device_add_disk+0x583/0x1220 [ 1574.416832][T22115] loop_add+0x554/0x710 [ 1574.420964][T22115] loop_control_ioctl+0x468/0x680 [ 1574.425962][T22115] ? xor_init+0x60/0x60 [ 1574.430091][T22115] do_vfs_ioctl+0x6fb/0x15b0 [ 1574.434660][T22115] __x64_sys_ioctl+0xd4/0x110 [ 1574.439483][T22115] do_syscall_64+0xcb/0x1e0 [ 1574.443959][T22115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1574.449824][T22115] RIP: 0033:0x7f2c46c0dae9 [ 1574.454212][T22115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1574.473788][T22115] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1574.482180][T22115] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1574.490122][T22115] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1574.498066][T22115] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1574.506011][T22115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.513955][T22115] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1574.522034][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1574.522374][T22115] ------------[ cut here ]------------ [ 1574.534578][T22115] WARNING: CPU: 1 PID: 22115 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1574.537463][T22102] loop3: p3 start 225 is beyond EOD, truncated [ 1574.543657][T22115] Modules linked in: [ 1574.543672][T22115] CPU: 1 PID: 22115 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1574.543677][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.543692][T22115] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1574.543700][T22115] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1574.543710][T22115] RSP: 0018:ffff888197a07ce8 EFLAGS: 00010246 [ 1574.550403][T22102] loop3: p4 start 301989888 is beyond EOD, truncated [ 1574.553702][T22115] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1574.553707][T22115] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1574.553712][T22115] RBP: ffff8881ef152298 R08: ffffffff82147a3e R09: 0000000000000010 [ 1574.553717][T22115] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1574.553722][T22115] R13: 1ffff11035085201 R14: 1ffff1103508529d R15: ffff8881a8429000 [ 1574.553729][T22115] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1574.553734][T22115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1574.553739][T22115] CR2: 0000000000000000 CR3: 00000001e474c000 CR4: 00000000003406e0 [ 1574.553750][T22115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1574.684422][T22115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1574.692383][T22115] Call Trace: [ 1574.695668][T22115] loop_add+0x554/0x710 [ 1574.699825][T22115] loop_control_ioctl+0x468/0x680 [ 1574.704825][T22115] ? xor_init+0x60/0x60 [ 1574.708957][T22115] do_vfs_ioctl+0x6fb/0x15b0 [ 1574.713526][T22115] __x64_sys_ioctl+0xd4/0x110 [ 1574.718180][T22115] do_syscall_64+0xcb/0x1e0 [ 1574.722657][T22115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1574.728523][T22115] RIP: 0033:0x7f2c46c0dae9 [ 1574.732911][T22115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1574.752485][T22115] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1574.760866][T22115] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1574.768808][T22115] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1574.776748][T22115] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1574.784705][T22115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.792647][T22115] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1574.800603][T22115] ---[ end trace dcabad1d1d3cdeb9 ]--- [ 1574.834048][T22106] loop2: p2 < > p3 p4 [ 1574.838254][T22106] loop2: p2 size 2 extends beyond EOD, truncated [ 1574.845227][T22106] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1574.852709][T22106] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 57) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:20 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000001f008000da55aa", 0x40, 0x1c0}]) 18:22:20 executing program 5: syz_read_part_table(0x6c, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000010000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1575.003805][T22117] loop4: p2 < > p3 p4 [ 1575.007936][T22117] loop4: partition table partially beyond EOD, truncated [ 1575.015271][T22117] loop4: p2 start 9437184 is beyond EOD, truncated [ 1575.021815][T22117] loop4: p3 start 225 is beyond EOD, truncated [ 1575.028109][T22117] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000a40000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:20 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000e00000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1575.172431][ T2286] udevd[2286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1575.188329][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1575.254146][T22231] FAULT_INJECTION: forcing a failure. [ 1575.254146][T22231] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.266865][T22231] CPU: 0 PID: 22231 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1575.278459][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1575.288527][T22231] Call Trace: [ 1575.291789][T22231] dump_stack+0x18e/0x1de [ 1575.296096][T22231] should_fail+0x5d8/0x740 [ 1575.300480][T22231] ? __kernfs_new_node+0x8b/0x630 [ 1575.305476][T22231] should_failslab+0x5/0x20 [ 1575.309947][T22231] kmem_cache_alloc+0x36/0x290 [ 1575.314684][T22231] __kernfs_new_node+0x8b/0x630 [ 1575.319512][T22231] ? kernfs_add_one+0x49e/0x5c0 [ 1575.324337][T22231] kernfs_new_node+0x95/0x160 [ 1575.328983][T22231] __kernfs_create_file+0x45/0x260 [ 1575.334104][T22231] sysfs_add_file_mode_ns+0x293/0x340 [ 1575.339444][T22231] sysfs_create_file_ns+0x146/0x230 [ 1575.344612][T22231] device_add+0xbc7/0x1820 [ 1575.349036][T22231] device_create_vargs+0x1b8/0x210 [ 1575.354115][T22231] device_create+0x86/0xb0 [ 1575.358507][T22231] ? vsnprintf+0x1a07/0x1aa0 [ 1575.363068][T22231] bdi_register_va+0x89/0x5e0 [ 1575.367715][T22231] bdi_register+0x80/0xa0 [ 1575.372014][T22231] ? __device_add_disk+0x50a/0x1220 [ 1575.377181][T22231] bdi_register_owner+0x56/0xf0 [ 1575.381999][T22231] __device_add_disk+0x583/0x1220 [ 1575.386990][T22231] loop_add+0x554/0x710 [ 1575.391160][T22231] loop_control_ioctl+0x468/0x680 [ 1575.396152][T22231] ? xor_init+0x60/0x60 [ 1575.400277][T22231] do_vfs_ioctl+0x6fb/0x15b0 [ 1575.404840][T22231] __x64_sys_ioctl+0xd4/0x110 [ 1575.409488][T22231] do_syscall_64+0xcb/0x1e0 [ 1575.413963][T22231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1575.419822][T22231] RIP: 0033:0x7f2c46c0dae9 [ 1575.424203][T22231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.443807][T22231] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1575.452183][T22231] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1575.460123][T22231] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1575.468065][T22231] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.476004][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.483946][T22231] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1575.493105][T22231] ------------[ cut here ]------------ [ 1575.498922][T22231] WARNING: CPU: 0 PID: 22231 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1575.498931][T22231] Modules linked in: [ 1575.511881][T22231] CPU: 0 PID: 22231 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1575.523464][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1575.533498][T22231] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1575.539285][T22231] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1575.558854][T22231] RSP: 0018:ffff888191ac7ce8 EFLAGS: 00010246 [ 1575.564889][T22231] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1575.572829][T22231] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1575.580771][T22231] RBP: ffff8881eed16fa8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1575.588713][T22231] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1575.596664][T22231] R13: 1ffff11032eff001 R14: 1ffff11032eff09d R15: ffff8881977f8000 [ 1575.604604][T22231] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1575.613497][T22231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1575.620065][T22231] CR2: 00007f2c44963718 CR3: 0000000191819000 CR4: 00000000003406f0 [ 1575.628003][T22231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1575.635946][T22231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1575.643883][T22231] Call Trace: [ 1575.647150][T22231] loop_add+0x554/0x710 [ 1575.651280][T22231] loop_control_ioctl+0x468/0x680 [ 1575.656273][T22231] ? xor_init+0x60/0x60 [ 1575.660422][T22231] do_vfs_ioctl+0x6fb/0x15b0 [ 1575.664995][T22231] __x64_sys_ioctl+0xd4/0x110 [ 1575.669643][T22231] do_syscall_64+0xcb/0x1e0 [ 1575.674119][T22231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1575.680066][T22231] RIP: 0033:0x7f2c46c0dae9 [ 1575.684449][T22231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.704029][T22231] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1575.712405][T22231] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1575.720346][T22231] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1575.728284][T22231] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.736220][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.744167][T22231] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1575.752118][T22231] ---[ end trace dcabad1d1d3cdeba ]--- 18:22:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 58) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1575.883945][T22229] loop5: p2 < > p3 p4 [ 1575.888145][T22229] loop5: p2 size 2 extends beyond EOD, truncated [ 1575.895105][T22229] loop5: p3 start 225 is beyond EOD, truncated [ 1575.901279][T22229] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1576.045565][T22237] loop4: p2 < > p3 p4 [ 1576.049682][T22237] loop4: partition table partially beyond EOD, truncated [ 1576.057542][T22237] loop4: p2 start 16777216 is beyond EOD, truncated [ 1576.064224][T22237] loop4: p3 start 225 is beyond EOD, truncated [ 1576.070411][T22237] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:21 executing program 5: syz_read_part_table(0x74, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1576.144539][ T155] loop2: p2 < > p3 p4 [ 1576.148854][T22344] loop3: p2 < > p3 p4 [ 1576.149823][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1576.153084][T22344] loop3: p2 size 2 extends beyond EOD, truncated [ 1576.160768][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1576.166093][T22344] loop3: p3 start 225 is beyond EOD, truncated [ 1576.173430][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1576.178845][T22344] loop3: p4 start 520093696 is beyond EOD, truncated [ 1576.196348][T22240] loop2: p2 < > p3 p4 [ 1576.200657][T22240] loop2: p2 size 2 extends beyond EOD, truncated [ 1576.207446][T22240] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1576.214929][T22240] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000020000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1576.284161][T22350] FAULT_INJECTION: forcing a failure. [ 1576.284161][T22350] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.296780][T22350] CPU: 1 PID: 22350 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1576.308374][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.318406][T22350] Call Trace: [ 1576.321687][T22350] dump_stack+0x18e/0x1de [ 1576.326000][T22350] should_fail+0x5d8/0x740 [ 1576.330402][T22350] ? __kernfs_new_node+0x8b/0x630 [ 1576.335396][T22350] should_failslab+0x5/0x20 [ 1576.339868][T22350] kmem_cache_alloc+0x36/0x290 [ 1576.344603][T22350] __kernfs_new_node+0x8b/0x630 [ 1576.349469][T22350] ? kernfs_add_one+0x49e/0x5c0 [ 1576.354301][T22350] kernfs_new_node+0x95/0x160 [ 1576.358954][T22350] __kernfs_create_file+0x45/0x260 [ 1576.364038][T22350] sysfs_add_file_mode_ns+0x293/0x340 [ 1576.369388][T22350] sysfs_create_file_ns+0x146/0x230 [ 1576.374614][T22350] device_add+0xbc7/0x1820 [ 1576.379018][T22350] device_create_vargs+0x1b8/0x210 [ 1576.384099][T22350] device_create+0x86/0xb0 [ 1576.388485][T22350] ? vsnprintf+0x1a07/0x1aa0 [ 1576.393047][T22350] bdi_register_va+0x89/0x5e0 [ 1576.397692][T22350] bdi_register+0x80/0xa0 [ 1576.401990][T22350] ? __device_add_disk+0x50a/0x1220 [ 1576.407153][T22350] bdi_register_owner+0x56/0xf0 [ 1576.411973][T22350] __device_add_disk+0x583/0x1220 [ 1576.416967][T22350] loop_add+0x554/0x710 [ 1576.421091][T22350] loop_control_ioctl+0x468/0x680 [ 1576.426081][T22350] ? xor_init+0x60/0x60 [ 1576.430202][T22350] do_vfs_ioctl+0x6fb/0x15b0 [ 1576.434762][T22350] __x64_sys_ioctl+0xd4/0x110 [ 1576.439441][T22350] do_syscall_64+0xcb/0x1e0 [ 1576.443912][T22350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1576.449768][T22350] RIP: 0033:0x7f2c46c0dae9 [ 1576.454148][T22350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.474274][T22350] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.482650][T22350] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1576.490592][T22350] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1576.498532][T22350] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.506472][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.514410][T22350] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1576.522693][T22350] ------------[ cut here ]------------ [ 1576.528159][T22350] WARNING: CPU: 1 PID: 22350 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1576.528167][T22350] Modules linked in: [ 1576.541115][T22350] CPU: 1 PID: 22350 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1576.552700][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.562732][T22350] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1576.568504][T22350] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1576.588073][T22350] RSP: 0018:ffff8881e1e87ce8 EFLAGS: 00010246 [ 1576.594103][T22350] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1576.602041][T22350] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1576.609976][T22350] RBP: ffff8881ef0a2298 R08: ffffffff82147a3e R09: 0000000000000010 [ 1576.617915][T22350] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1576.625853][T22350] R13: 1ffff1103c9e9401 R14: 1ffff1103c9e949d R15: ffff8881e4f4a000 [ 1576.633792][T22350] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1576.642689][T22350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1576.649240][T22350] CR2: 0000001b2ef21000 CR3: 000000019c808000 CR4: 00000000003406e0 [ 1576.657181][T22350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1576.665129][T22350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1576.673077][T22350] Call Trace: [ 1576.676345][T22350] loop_add+0x554/0x710 [ 1576.680471][T22350] loop_control_ioctl+0x468/0x680 [ 1576.685465][T22350] ? xor_init+0x60/0x60 [ 1576.689588][T22350] do_vfs_ioctl+0x6fb/0x15b0 [ 1576.694157][T22350] __x64_sys_ioctl+0xd4/0x110 [ 1576.698805][T22350] do_syscall_64+0xcb/0x1e0 [ 1576.703280][T22350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1576.709138][T22350] RIP: 0033:0x7f2c46c0dae9 [ 1576.713538][T22350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.733111][T22350] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.741492][T22350] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1576.749439][T22350] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1576.757390][T22350] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.765339][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.773282][T22350] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:22 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000020008000da55aa", 0x40, 0x1c0}]) [ 1576.781229][T22350] ---[ end trace dcabad1d1d3cdebb ]--- 18:22:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 59) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:22 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001000000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000c10000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1577.063819][T22365] FAULT_INJECTION: forcing a failure. [ 1577.063819][T22365] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.065159][ T155] loop2: p2 < > p3 p4 [ 1577.077278][T22365] CPU: 0 PID: 22365 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1577.080920][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1577.092110][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.092113][T22365] Call Trace: [ 1577.092128][T22365] dump_stack+0x18e/0x1de [ 1577.092140][T22365] should_fail+0x5d8/0x740 [ 1577.092152][T22365] ? __kernfs_new_node+0x8b/0x630 [ 1577.092167][T22365] should_failslab+0x5/0x20 [ 1577.099108][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1577.108501][T22365] kmem_cache_alloc+0x36/0x290 [ 1577.108512][T22365] ? selinux_kernfs_init_security+0x12d/0x720 [ 1577.108523][T22365] __kernfs_new_node+0x8b/0x630 [ 1577.108536][T22365] ? kernfs_activate+0x1c7/0x420 [ 1577.112337][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1577.116098][T22365] ? rb_first+0x2/0x70 [ 1577.116109][T22365] kernfs_new_node+0x95/0x160 [ 1577.116124][T22365] __kernfs_create_file+0x45/0x260 [ 1577.178358][T22365] sysfs_add_file_mode_ns+0x293/0x340 [ 1577.178373][T22365] sysfs_merge_group+0x19b/0x320 [ 1577.188626][T22365] dpm_sysfs_add+0xbd/0x260 [ 1577.193098][T22365] device_add+0xcec/0x1820 [ 1577.197486][T22365] device_create_vargs+0x1b8/0x210 [ 1577.202568][T22365] device_create+0x86/0xb0 [ 1577.206967][T22365] ? vsnprintf+0x1a07/0x1aa0 [ 1577.211533][T22365] bdi_register_va+0x89/0x5e0 [ 1577.216176][T22365] bdi_register+0x80/0xa0 [ 1577.220477][T22365] ? __device_add_disk+0x50a/0x1220 [ 1577.225647][T22365] bdi_register_owner+0x56/0xf0 [ 1577.230483][T22365] __device_add_disk+0x583/0x1220 [ 1577.235474][T22365] loop_add+0x554/0x710 [ 1577.239597][T22365] loop_control_ioctl+0x468/0x680 [ 1577.244588][T22365] ? xor_init+0x60/0x60 [ 1577.248713][T22365] do_vfs_ioctl+0x6fb/0x15b0 [ 1577.253279][T22365] __x64_sys_ioctl+0xd4/0x110 [ 1577.257928][T22365] do_syscall_64+0xcb/0x1e0 [ 1577.262418][T22365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1577.268274][T22365] RIP: 0033:0x7f2c46c0dae9 [ 1577.272659][T22365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.292230][T22365] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1577.300606][T22365] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1577.308546][T22365] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1577.316485][T22365] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.324433][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.332382][T22365] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1577.341524][T22365] ------------[ cut here ]------------ [ 1577.346984][T22365] WARNING: CPU: 0 PID: 22365 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1577.356056][T22365] Modules linked in: [ 1577.359927][T22365] CPU: 0 PID: 22365 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1577.371513][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.381560][T22365] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1577.387331][T22365] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1577.406919][T22365] RSP: 0018:ffff88819237fce8 EFLAGS: 00010246 [ 1577.412967][T22365] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1577.420907][T22365] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1577.428863][T22365] RBP: ffff8881eed133b8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1577.436807][T22365] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1577.444744][T22365] R13: 1ffff1103d7d9001 R14: 1ffff1103d7d909d R15: ffff8881ebec8000 [ 1577.452684][T22365] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1577.461578][T22365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1577.468141][T22365] CR2: 0000000000000000 CR3: 000000019c808000 CR4: 00000000003406f0 [ 1577.476088][T22365] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1577.484036][T22365] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1577.491974][T22365] Call Trace: [ 1577.495240][T22365] loop_add+0x554/0x710 [ 1577.499368][T22365] loop_control_ioctl+0x468/0x680 [ 1577.504358][T22365] ? xor_init+0x60/0x60 [ 1577.508482][T22365] do_vfs_ioctl+0x6fb/0x15b0 [ 1577.513045][T22365] __x64_sys_ioctl+0xd4/0x110 [ 1577.517691][T22365] do_syscall_64+0xcb/0x1e0 [ 1577.522163][T22365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1577.528039][T22365] RIP: 0033:0x7f2c46c0dae9 [ 1577.532422][T22365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.551992][T22365] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1577.560384][T22365] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1577.568322][T22365] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1577.576261][T22365] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.584201][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.592156][T22365] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1577.600118][T22365] ---[ end trace dcabad1d1d3cdebc ]--- [ 1577.708106][T22362] loop5: p2 < > p3 p4 [ 1577.712328][T22362] loop5: p2 size 2 extends beyond EOD, truncated [ 1577.719212][T22362] loop5: p3 start 225 is beyond EOD, truncated [ 1577.725468][T22362] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 60) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1577.814880][T22363] loop3: p2 < > p3 p4 [ 1577.819097][T22363] loop3: p2 size 2 extends beyond EOD, truncated [ 1577.826038][T22363] loop3: p3 start 225 is beyond EOD, truncated [ 1577.832198][T22363] loop3: p4 start 536870912 is beyond EOD, truncated 18:22:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000004020000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:23 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000022008000da55aa", 0x40, 0x1c0}]) 18:22:23 executing program 5: syz_read_part_table(0x7a, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1577.995079][T22482] FAULT_INJECTION: forcing a failure. [ 1577.995079][T22482] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.007715][T22482] CPU: 1 PID: 22482 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1578.007720][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.007723][T22482] Call Trace: [ 1578.007739][T22482] dump_stack+0x18e/0x1de [ 1578.007752][T22482] should_fail+0x5d8/0x740 [ 1578.007765][T22482] ? __kernfs_new_node+0x8b/0x630 [ 1578.007775][T22482] should_failslab+0x5/0x20 [ 1578.007785][T22482] kmem_cache_alloc+0x36/0x290 [ 1578.007796][T22482] __kernfs_new_node+0x8b/0x630 [ 1578.007808][T22482] ? mutex_lock+0x6c/0xc0 [ 1578.007819][T22482] ? kernfs_activate+0x3fc/0x420 [ 1578.007831][T22482] kernfs_new_node+0x95/0x160 [ 1578.007843][T22482] __kernfs_create_file+0x45/0x260 [ 1578.007853][T22482] sysfs_add_file_mode_ns+0x293/0x340 [ 1578.007865][T22482] sysfs_merge_group+0x19b/0x320 [ 1578.007877][T22482] dpm_sysfs_add+0xbd/0x260 [ 1578.007891][T22482] device_add+0xcec/0x1820 [ 1578.007906][T22482] device_create_vargs+0x1b8/0x210 [ 1578.007916][T22482] device_create+0x86/0xb0 [ 1578.007924][T22482] ? vsnprintf+0x1a07/0x1aa0 [ 1578.007936][T22482] bdi_register_va+0x89/0x5e0 [ 1578.007945][T22482] bdi_register+0x80/0xa0 [ 1578.007958][T22482] ? __device_add_disk+0x50a/0x1220 [ 1578.126971][T22482] bdi_register_owner+0x56/0xf0 [ 1578.131796][T22482] __device_add_disk+0x583/0x1220 [ 1578.136829][T22482] loop_add+0x554/0x710 [ 1578.140992][T22482] loop_control_ioctl+0x468/0x680 [ 1578.145983][T22482] ? xor_init+0x60/0x60 [ 1578.150111][T22482] do_vfs_ioctl+0x6fb/0x15b0 [ 1578.154673][T22482] __x64_sys_ioctl+0xd4/0x110 [ 1578.159321][T22482] do_syscall_64+0xcb/0x1e0 [ 1578.163795][T22482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1578.169656][T22482] RIP: 0033:0x7f2c46c0dae9 [ 1578.174073][T22482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.193687][T22482] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.202063][T22482] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1578.210003][T22482] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1578.217942][T22482] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.225878][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.233817][T22482] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1578.242109][T22482] ------------[ cut here ]------------ [ 1578.247560][T22482] WARNING: CPU: 1 PID: 22482 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1578.256625][T22482] Modules linked in: [ 1578.260493][T22482] CPU: 1 PID: 22482 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1578.272083][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.282118][T22482] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1578.287889][T22482] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1578.307459][T22482] RSP: 0018:ffff8881e6017ce8 EFLAGS: 00010246 [ 1578.313494][T22482] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1578.321459][T22482] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1578.329437][T22482] RBP: ffff8881ef0a6fa8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1578.337378][T22482] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1578.345318][T22482] R13: 1ffff1103d134201 R14: 1ffff1103d13429d R15: ffff8881e89a1000 [ 1578.353294][T22482] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1578.362198][T22482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1578.368759][T22482] CR2: 0000555555cc3b38 CR3: 00000001e509c000 CR4: 00000000003406e0 [ 1578.376699][T22482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1578.384640][T22482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1578.392617][T22482] Call Trace: [ 1578.395907][T22482] loop_add+0x554/0x710 [ 1578.400038][T22482] loop_control_ioctl+0x468/0x680 [ 1578.405030][T22482] ? xor_init+0x60/0x60 [ 1578.409155][T22482] do_vfs_ioctl+0x6fb/0x15b0 [ 1578.413715][T22482] __x64_sys_ioctl+0xd4/0x110 [ 1578.418373][T22482] do_syscall_64+0xcb/0x1e0 [ 1578.422850][T22482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1578.428723][T22482] RIP: 0033:0x7f2c46c0dae9 [ 1578.433106][T22482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.452689][T22482] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.461065][T22482] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1578.469012][T22482] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1578.476954][T22482] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.484894][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.492834][T22482] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1578.501221][T22482] ---[ end trace dcabad1d1d3cdebd ]--- 18:22:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 61) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1578.604394][T22372] loop2: p2 < > p3 p4 [ 1578.608647][T22372] loop2: p2 size 2 extends beyond EOD, truncated [ 1578.615513][T22372] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1578.622981][T22372] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1578.660835][T22483] loop1: p2 < > p3 p4 [ 1578.665037][T22483] loop1: partition table partially beyond EOD, truncated [ 1578.672174][T22483] loop1: p2 start 3238002688 is beyond EOD, truncated [ 1578.679218][T22483] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1578.686818][T22483] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1578.704558][T22491] loop3: p2 < > p3 p4 [ 1578.708734][T22491] loop3: p2 size 2 extends beyond EOD, truncated [ 1578.715569][T22491] loop3: p3 start 225 is beyond EOD, truncated [ 1578.721936][T22491] loop3: p4 start 570425344 is beyond EOD, truncated 18:22:24 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001100000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1578.763986][T22496] FAULT_INJECTION: forcing a failure. [ 1578.763986][T22496] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.776611][T22496] CPU: 1 PID: 22496 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1578.788293][T22496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.788296][T22496] Call Trace: [ 1578.788323][T22496] dump_stack+0x18e/0x1de [ 1578.788338][T22496] should_fail+0x5d8/0x740 [ 1578.788354][T22496] ? __kernfs_new_node+0x8b/0x630 [ 1578.815393][T22496] should_failslab+0x5/0x20 [ 1578.819867][T22496] kmem_cache_alloc+0x36/0x290 [ 1578.824622][T22496] __kernfs_new_node+0x8b/0x630 [ 1578.829452][T22496] ? mutex_lock+0x6c/0xc0 [ 1578.833750][T22496] ? kernfs_activate+0x3fc/0x420 [ 1578.838654][T22496] kernfs_new_node+0x95/0x160 [ 1578.843301][T22496] __kernfs_create_file+0x45/0x260 [ 1578.848383][T22496] sysfs_add_file_mode_ns+0x293/0x340 [ 1578.853722][T22496] sysfs_merge_group+0x19b/0x320 [ 1578.858630][T22496] dpm_sysfs_add+0xbd/0x260 [ 1578.863102][T22496] device_add+0xcec/0x1820 [ 1578.867491][T22496] device_create_vargs+0x1b8/0x210 [ 1578.872571][T22496] device_create+0x86/0xb0 [ 1578.876956][T22496] ? vsnprintf+0x1a07/0x1aa0 [ 1578.881515][T22496] bdi_register_va+0x89/0x5e0 [ 1578.886160][T22496] bdi_register+0x80/0xa0 [ 1578.890458][T22496] ? __device_add_disk+0x50a/0x1220 [ 1578.895623][T22496] bdi_register_owner+0x56/0xf0 [ 1578.900443][T22496] __device_add_disk+0x583/0x1220 [ 1578.905439][T22496] loop_add+0x554/0x710 [ 1578.909569][T22496] loop_control_ioctl+0x468/0x680 [ 1578.914561][T22496] ? xor_init+0x60/0x60 [ 1578.918684][T22496] do_vfs_ioctl+0x6fb/0x15b0 [ 1578.923289][T22496] __x64_sys_ioctl+0xd4/0x110 [ 1578.927939][T22496] do_syscall_64+0xcb/0x1e0 [ 1578.932420][T22496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1578.938282][T22496] RIP: 0033:0x7f2c46c0dae9 [ 1578.942666][T22496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.962275][T22496] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.970664][T22496] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1578.978608][T22496] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1578.986548][T22496] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.994489][T22496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.002430][T22496] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1579.011429][T22496] ------------[ cut here ]------------ [ 1579.016888][T22496] WARNING: CPU: 1 PID: 22496 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1579.025954][T22496] Modules linked in: [ 1579.029818][T22496] CPU: 1 PID: 22496 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1579.041423][T22496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.051454][T22496] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1579.057225][T22496] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1579.076800][T22496] RSP: 0018:ffff8881e71b7ce8 EFLAGS: 00010246 [ 1579.082841][T22496] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1579.090821][T22496] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1579.098761][T22496] RBP: ffff8881ef0a55f8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1579.106702][T22496] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1579.114649][T22496] R13: 1ffff11033b0ec01 R14: 1ffff11033b0ec9d R15: ffff88819d876000 [ 1579.122596][T22496] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1579.131500][T22496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.138066][T22496] CR2: 0000000000000000 CR3: 00000001921eb000 CR4: 00000000003406e0 [ 1579.146051][T22496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1579.153993][T22496] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1579.161932][T22496] Call Trace: [ 1579.165199][T22496] loop_add+0x554/0x710 [ 1579.169326][T22496] loop_control_ioctl+0x468/0x680 [ 1579.174318][T22496] ? xor_init+0x60/0x60 [ 1579.178444][T22496] do_vfs_ioctl+0x6fb/0x15b0 [ 1579.183014][T22496] __x64_sys_ioctl+0xd4/0x110 [ 1579.187658][T22496] do_syscall_64+0xcb/0x1e0 [ 1579.192131][T22496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1579.197995][T22496] RIP: 0033:0x7f2c46c0dae9 [ 1579.202379][T22496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.221950][T22496] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1579.230327][T22496] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1579.238266][T22496] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1579.246205][T22496] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1579.254188][T22496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.262127][T22496] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1579.270075][T22496] ---[ end trace dcabad1d1d3cdebe ]--- 18:22:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 62) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1579.314434][T22489] loop5: p2 < > p3 p4 [ 1579.318623][T22489] loop5: p2 size 2 extends beyond EOD, truncated [ 1579.325590][T22489] loop5: p3 start 225 is beyond EOD, truncated [ 1579.331808][T22489] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffffffc90000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:24 executing program 5: syz_read_part_table(0x90, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1579.405050][ T155] loop2: p2 < > p3 p4 [ 1579.409215][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1579.416051][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1579.423621][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:24 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000025008000da55aa", 0x40, 0x1c0}]) [ 1579.514588][T22500] loop4: p2 < > p3 p4 [ 1579.518664][T22500] loop4: partition table partially beyond EOD, truncated [ 1579.525879][T22500] loop4: p2 start 33816576 is beyond EOD, truncated [ 1579.532446][T22500] loop4: p3 start 225 is beyond EOD, truncated [ 1579.538600][T22500] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1579.569135][T22606] FAULT_INJECTION: forcing a failure. [ 1579.569135][T22606] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.581815][T22606] CPU: 0 PID: 22606 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1579.583188][ T155] loop2: p2 < > p3 p4 [ 1579.593417][T22606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.593420][T22606] Call Trace: [ 1579.593438][T22606] dump_stack+0x18e/0x1de [ 1579.593451][T22606] should_fail+0x5d8/0x740 [ 1579.593465][T22606] ? __kernfs_new_node+0x8b/0x630 [ 1579.593481][T22606] should_failslab+0x5/0x20 [ 1579.597875][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1579.607552][T22606] kmem_cache_alloc+0x36/0x290 [ 1579.607564][T22606] __kernfs_new_node+0x8b/0x630 [ 1579.607573][T22606] ? mutex_lock+0x6c/0xc0 [ 1579.607587][T22606] ? kernfs_activate+0x3fc/0x420 [ 1579.612169][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1579.615142][T22606] kernfs_new_node+0x95/0x160 [ 1579.615154][T22606] __kernfs_create_file+0x45/0x260 [ 1579.615166][T22606] sysfs_add_file_mode_ns+0x293/0x340 [ 1579.620270][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1579.624548][T22606] sysfs_merge_group+0x19b/0x320 [ 1579.624560][T22606] dpm_sysfs_add+0xbd/0x260 [ 1579.624573][T22606] device_add+0xcec/0x1820 [ 1579.697007][T22606] device_create_vargs+0x1b8/0x210 [ 1579.697021][T22606] device_create+0x86/0xb0 [ 1579.706488][T22606] ? vsnprintf+0x1a07/0x1aa0 [ 1579.711093][T22606] bdi_register_va+0x89/0x5e0 [ 1579.715738][T22606] bdi_register+0x80/0xa0 [ 1579.720123][T22606] ? apic_timer_interrupt+0xa/0x20 [ 1579.725203][T22606] ? __device_add_disk+0x50a/0x1220 [ 1579.730371][T22606] bdi_register_owner+0x56/0xf0 [ 1579.735192][T22606] __device_add_disk+0x583/0x1220 [ 1579.740193][T22606] loop_add+0x554/0x710 [ 1579.744332][T22606] loop_control_ioctl+0x468/0x680 [ 1579.749334][T22606] ? xor_init+0x60/0x60 [ 1579.753462][T22606] do_vfs_ioctl+0x6fb/0x15b0 [ 1579.758022][T22606] __x64_sys_ioctl+0xd4/0x110 [ 1579.762670][T22606] do_syscall_64+0xcb/0x1e0 [ 1579.767152][T22606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1579.773013][T22606] RIP: 0033:0x7f2c46c0dae9 [ 1579.777394][T22606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.796965][T22606] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1579.805348][T22606] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1579.813286][T22606] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1579.821305][T22606] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1579.829256][T22606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.837205][T22606] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1579.846508][T22606] ------------[ cut here ]------------ [ 1579.851953][T22606] WARNING: CPU: 0 PID: 22606 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1579.861020][T22606] Modules linked in: [ 1579.864886][T22606] CPU: 0 PID: 22606 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1579.876471][T22606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.886512][T22606] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1579.892291][T22606] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1579.911862][T22606] RSP: 0018:ffff8881e6607ce8 EFLAGS: 00010246 [ 1579.917893][T22606] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1579.925829][T22606] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1579.933767][T22606] RBP: ffff8881eed11178 R08: ffffffff82147a3e R09: 0000000000000010 [ 1579.941718][T22606] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1579.949659][T22606] R13: 1ffff11035067001 R14: 1ffff1103506709d R15: ffff8881a8338000 [ 1579.957604][T22606] FS: 00007f2c44984700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1579.966510][T22606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.973058][T22606] CR2: 0000001b2f321000 CR3: 000000019c92b000 CR4: 00000000003406f0 [ 1579.980997][T22606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1579.988938][T22606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1579.996875][T22606] Call Trace: [ 1580.000138][T22606] loop_add+0x554/0x710 [ 1580.004263][T22606] loop_control_ioctl+0x468/0x680 [ 1580.009287][T22606] ? xor_init+0x60/0x60 [ 1580.013413][T22606] do_vfs_ioctl+0x6fb/0x15b0 [ 1580.017976][T22606] __x64_sys_ioctl+0xd4/0x110 [ 1580.022632][T22606] do_syscall_64+0xcb/0x1e0 [ 1580.027104][T22606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1580.032963][T22606] RIP: 0033:0x7f2c46c0dae9 [ 1580.037348][T22606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.056921][T22606] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.065315][T22606] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1580.073256][T22606] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1580.081213][T22606] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.089151][T22606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.097089][T22606] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1580.105034][T22606] ---[ end trace dcabad1d1d3cdebf ]--- 18:22:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 63) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000030000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1580.234345][T22608] loop5: p2 < > p3 p4 [ 1580.238606][T22608] loop5: p2 size 2 extends beyond EOD, truncated [ 1580.245572][T22608] loop5: p3 start 225 is beyond EOD, truncated [ 1580.251758][T22608] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1580.294362][T22619] FAULT_INJECTION: forcing a failure. [ 1580.294362][T22619] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.306976][T22619] CPU: 1 PID: 22619 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1580.318567][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.328595][T22619] Call Trace: [ 1580.331870][T22619] dump_stack+0x18e/0x1de [ 1580.336186][T22619] should_fail+0x5d8/0x740 [ 1580.340590][T22619] ? __kernfs_new_node+0x8b/0x630 [ 1580.345602][T22619] should_failslab+0x5/0x20 [ 1580.350082][T22619] kmem_cache_alloc+0x36/0x290 [ 1580.354821][T22619] __kernfs_new_node+0x8b/0x630 [ 1580.359645][T22619] ? mutex_lock+0x6c/0xc0 [ 1580.363950][T22619] ? kernfs_activate+0x3fc/0x420 [ 1580.368860][T22619] kernfs_new_node+0x95/0x160 [ 1580.373510][T22619] __kernfs_create_file+0x45/0x260 [ 1580.378596][T22619] sysfs_add_file_mode_ns+0x293/0x340 [ 1580.383942][T22619] sysfs_merge_group+0x19b/0x320 [ 1580.388850][T22619] dpm_sysfs_add+0xbd/0x260 [ 1580.393325][T22619] device_add+0xcec/0x1820 [ 1580.397717][T22619] device_create_vargs+0x1b8/0x210 [ 1580.402802][T22619] device_create+0x86/0xb0 [ 1580.407187][T22619] ? vsnprintf+0x1a07/0x1aa0 [ 1580.411752][T22619] bdi_register_va+0x89/0x5e0 [ 1580.416404][T22619] bdi_register+0x80/0xa0 [ 1580.420704][T22619] ? __device_add_disk+0x50a/0x1220 [ 1580.425877][T22619] bdi_register_owner+0x56/0xf0 [ 1580.430700][T22619] __device_add_disk+0x583/0x1220 [ 1580.435699][T22619] loop_add+0x554/0x710 [ 1580.439830][T22619] loop_control_ioctl+0x468/0x680 [ 1580.444825][T22619] ? xor_init+0x60/0x60 [ 1580.448952][T22619] do_vfs_ioctl+0x6fb/0x15b0 [ 1580.453518][T22619] __x64_sys_ioctl+0xd4/0x110 [ 1580.458168][T22619] do_syscall_64+0xcb/0x1e0 [ 1580.462647][T22619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1580.468513][T22619] RIP: 0033:0x7f2c46c0dae9 [ 1580.472903][T22619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.492479][T22619] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.500861][T22619] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1580.508803][T22619] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1580.516745][T22619] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.524688][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.532654][T22619] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1580.541113][T22619] ------------[ cut here ]------------ [ 1580.546583][T22619] WARNING: CPU: 1 PID: 22619 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1580.546585][T22619] Modules linked in: [ 1580.546596][T22619] CPU: 1 PID: 22619 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1580.546600][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.546609][T22619] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1580.546616][T22619] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1580.546620][T22619] RSP: 0018:ffff8881e1477ce8 EFLAGS: 00010246 [ 1580.546626][T22619] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1580.546630][T22619] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1580.546634][T22619] RBP: ffff8881ef0a33b8 R08: ffffffff82147a3e R09: 0000000000000010 18:22:26 executing program 5: syz_read_part_table(0x9a, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1580.546638][T22619] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1580.546642][T22619] R13: 1ffff11033cf6a01 R14: 1ffff11033cf6a9d R15: ffff88819e7b5000 [ 1580.546659][T22619] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1580.546664][T22619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1580.546669][T22619] CR2: 00007f1cd6106718 CR3: 00000001eb830000 CR4: 00000000003406e0 [ 1580.546675][T22619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1580.546679][T22619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1580.546681][T22619] Call Trace: [ 1580.546696][T22619] loop_add+0x554/0x710 [ 1580.546706][T22619] loop_control_ioctl+0x468/0x680 [ 1580.546713][T22619] ? xor_init+0x60/0x60 [ 1580.546723][T22619] do_vfs_ioctl+0x6fb/0x15b0 [ 1580.546736][T22619] __x64_sys_ioctl+0xd4/0x110 [ 1580.546745][T22619] do_syscall_64+0xcb/0x1e0 [ 1580.546755][T22619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1580.546760][T22619] RIP: 0033:0x7f2c46c0dae9 [ 1580.546766][T22619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.546770][T22619] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.546776][T22619] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1580.546781][T22619] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1580.546785][T22619] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 18:22:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 64) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1580.546789][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.546793][T22619] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1580.546803][T22619] ---[ end trace dcabad1d1d3cdec0 ]--- [ 1580.694897][ T392] udevd[392]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1580.697986][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1580.707398][T22615] loop3: p2 < > p3 p4 [ 1580.836395][T22615] loop3: p2 size 2 extends beyond EOD, truncated [ 1580.844141][T22615] loop3: p3 start 225 is beyond EOD, truncated [ 1580.850291][T22615] loop3: p4 start 620756992 is beyond EOD, truncated 18:22:26 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000040008000da55aa", 0x40, 0x1c0}]) [ 1580.923861][T22616] loop2: p2 < > p3 p4 [ 1580.928048][T22616] loop2: p2 size 2 extends beyond EOD, truncated [ 1580.935858][T22616] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1580.943482][T22616] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1581.013697][T22723] loop1: p2 < > p3 p4 [ 1581.017879][T22723] loop1: partition table partially beyond EOD, truncated [ 1581.021083][ T155] loop2: p2 < > p3 p4 [ 1581.025092][T22723] loop1: p2 start 3388997631 is beyond EOD, truncated [ 1581.031547][T22733] FAULT_INJECTION: forcing a failure. [ 1581.031547][T22733] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.035969][T22723] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1581.048468][T22733] CPU: 0 PID: 22733 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1581.062401][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1581.067130][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.067134][T22733] Call Trace: [ 1581.067149][T22733] dump_stack+0x18e/0x1de [ 1581.067161][T22733] should_fail+0x5d8/0x740 [ 1581.067176][T22733] ? kobject_uevent_env+0x252/0x1000 [ 1581.074955][T22723] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1581.083505][T22733] should_failslab+0x5/0x20 [ 1581.083515][T22733] kmem_cache_alloc_trace+0x39/0x2b0 [ 1581.083523][T22733] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 1581.083533][T22733] kobject_uevent_env+0x252/0x1000 [ 1581.083546][T22733] ? mutex_lock+0x6c/0xc0 [ 1581.087014][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1581.091106][T22733] device_add+0xecf/0x1820 [ 1581.091120][T22733] device_create_vargs+0x1b8/0x210 [ 1581.091132][T22733] device_create+0x86/0xb0 [ 1581.102339][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1581.107848][T22733] ? vsnprintf+0x1a07/0x1aa0 [ 1581.107862][T22733] bdi_register_va+0x89/0x5e0 [ 1581.107872][T22733] bdi_register+0x80/0xa0 [ 1581.107887][T22733] ? __device_add_disk+0x50a/0x1220 [ 1581.179569][T22733] bdi_register_owner+0x56/0xf0 [ 1581.184389][T22733] __device_add_disk+0x583/0x1220 [ 1581.189386][T22733] loop_add+0x554/0x710 [ 1581.193511][T22733] loop_control_ioctl+0x468/0x680 [ 1581.198509][T22733] ? xor_init+0x60/0x60 [ 1581.202632][T22733] do_vfs_ioctl+0x6fb/0x15b0 [ 1581.207207][T22733] __x64_sys_ioctl+0xd4/0x110 [ 1581.211875][T22733] do_syscall_64+0xcb/0x1e0 [ 1581.216349][T22733] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1581.222208][T22733] RIP: 0033:0x7f2c46c0dae9 [ 1581.226590][T22733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.246162][T22733] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.254539][T22733] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1581.262479][T22733] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1581.270428][T22733] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.278377][T22733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.286316][T22733] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 65) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1581.334109][T22730] loop5: p2 < > p3 p4 [ 1581.338326][T22730] loop5: p2 size 2 extends beyond EOD, truncated [ 1581.345319][T22730] loop5: p3 start 225 is beyond EOD, truncated [ 1581.351505][T22730] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000e10000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1581.576175][T22738] loop4: p2 < > p3 p4 [ 1581.580315][T22738] loop4: partition table partially beyond EOD, truncated [ 1581.587520][T22738] loop4: p2 start 50331648 is beyond EOD, truncated [ 1581.594202][T22738] loop4: p3 start 225 is beyond EOD, truncated [ 1581.600375][T22738] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1581.654831][T22744] FAULT_INJECTION: forcing a failure. [ 1581.654831][T22744] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.667439][T22744] CPU: 1 PID: 22744 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1581.679030][T22744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.689098][T22744] Call Trace: [ 1581.692417][T22744] dump_stack+0x18e/0x1de [ 1581.696757][T22744] should_fail+0x5d8/0x740 [ 1581.701144][T22744] ? kzalloc+0x1d/0x30 [ 1581.705190][T22744] should_failslab+0x5/0x20 [ 1581.709662][T22744] __kmalloc+0x5f/0x2f0 [ 1581.713785][T22744] kzalloc+0x1d/0x30 [ 1581.717648][T22744] kobject_get_path+0xb3/0x190 [ 1581.722384][T22744] kobject_uevent_env+0x269/0x1000 [ 1581.727462][T22744] ? mutex_lock+0x6c/0xc0 [ 1581.731758][T22744] device_add+0xecf/0x1820 [ 1581.736145][T22744] device_create_vargs+0x1b8/0x210 [ 1581.741233][T22744] device_create+0x86/0xb0 [ 1581.745630][T22744] ? vsnprintf+0x1a07/0x1aa0 [ 1581.750196][T22744] bdi_register_va+0x89/0x5e0 [ 1581.754843][T22744] bdi_register+0x80/0xa0 [ 1581.759151][T22744] ? __device_add_disk+0x50a/0x1220 [ 1581.764323][T22744] bdi_register_owner+0x56/0xf0 [ 1581.769154][T22744] __device_add_disk+0x583/0x1220 [ 1581.774165][T22744] loop_add+0x554/0x710 [ 1581.778306][T22744] loop_control_ioctl+0x468/0x680 [ 1581.783318][T22744] ? xor_init+0x60/0x60 [ 1581.787457][T22744] do_vfs_ioctl+0x6fb/0x15b0 [ 1581.792030][T22744] __x64_sys_ioctl+0xd4/0x110 [ 1581.796696][T22744] do_syscall_64+0xcb/0x1e0 [ 1581.801180][T22744] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1581.807040][T22744] RIP: 0033:0x7f2c46c0dae9 [ 1581.811478][T22744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.831048][T22744] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1581.839428][T22744] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1581.847364][T22744] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 18:22:27 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005001200000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1581.855304][T22744] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.863248][T22744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.871185][T22744] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:27 executing program 5: syz_read_part_table(0xc1, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000040000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 66) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1581.966273][T22742] loop3: p2 < > p3 p4 [ 1581.970457][T22742] loop3: p2 size 2 extends beyond EOD, truncated [ 1581.989073][ T349] udevd[349]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1581.989093][ T1995] udevd[1995]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1582.006145][T22742] loop3: p3 start 225 is beyond EOD, truncated [ 1582.014691][T22742] loop3: p4 start 1073741824 is beyond EOD, truncated [ 1582.026274][T22857] FAULT_INJECTION: forcing a failure. [ 1582.026274][T22857] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.027169][T22858] loop5: p2 < > p3 p4 [ 1582.038883][T22857] CPU: 1 PID: 22857 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1582.038888][T22857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.038891][T22857] Call Trace: [ 1582.038906][T22857] dump_stack+0x18e/0x1de [ 1582.038920][T22857] should_fail+0x5d8/0x740 [ 1582.038932][T22857] ? kobject_uevent_env+0x252/0x1000 [ 1582.038947][T22857] should_failslab+0x5/0x20 [ 1582.043697][T22858] loop5: p2 size 2 extends beyond EOD, truncated [ 1582.054589][T22857] kmem_cache_alloc_trace+0x39/0x2b0 [ 1582.054600][T22857] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 1582.054610][T22857] kobject_uevent_env+0x252/0x1000 [ 1582.054622][T22857] ? mutex_lock+0x6c/0xc0 [ 1582.065373][T22858] loop5: p3 start 225 is beyond EOD, truncated [ 1582.067916][T22857] device_add+0xecf/0x1820 [ 1582.067931][T22857] device_create_vargs+0x1b8/0x210 [ 1582.067944][T22857] device_create+0x86/0xb0 [ 1582.072313][T22858] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1582.076623][T22857] ? vsnprintf+0x1a07/0x1aa0 [ 1582.076637][T22857] bdi_register_va+0x89/0x5e0 [ 1582.076647][T22857] bdi_register+0x80/0xa0 [ 1582.076658][T22857] ? __device_add_disk+0x50a/0x1220 [ 1582.076670][T22857] bdi_register_owner+0x56/0xf0 [ 1582.163305][T22857] __device_add_disk+0x583/0x1220 [ 1582.168308][T22857] loop_add+0x554/0x710 [ 1582.172436][T22857] loop_control_ioctl+0x468/0x680 [ 1582.177433][T22857] ? xor_init+0x60/0x60 [ 1582.181564][T22857] do_vfs_ioctl+0x6fb/0x15b0 [ 1582.186133][T22857] __x64_sys_ioctl+0xd4/0x110 [ 1582.190785][T22857] do_syscall_64+0xcb/0x1e0 [ 1582.195264][T22857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1582.201147][T22857] RIP: 0033:0x7f2c46c0dae9 [ 1582.205550][T22857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1582.225122][T22857] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.233502][T22857] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1582.241448][T22857] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1582.249392][T22857] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1582.257334][T22857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:22:27 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000048008000da55aa", 0x40, 0x1c0}]) [ 1582.265274][T22857] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1582.325702][T22859] loop2: p2 < > p3 p4 [ 1582.329981][T22859] loop2: p2 size 2 extends beyond EOD, truncated [ 1582.336950][T22859] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1582.344653][T22859] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 67) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1582.424716][ T392] udevd[392]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1582.427357][ T155] loop2: p2 < > p3 p4 [ 1582.438592][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1582.439140][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1582.439571][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:28 executing program 5: syz_read_part_table(0xe0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1582.474498][T22867] loop4: p2 < > p3 p4 [ 1582.478627][T22867] loop4: partition table partially beyond EOD, truncated [ 1582.486036][T22867] loop4: p2 start 67108864 is beyond EOD, truncated [ 1582.492648][T22867] loop4: p3 start 225 is beyond EOD, truncated [ 1582.499074][T22867] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1582.514044][T22863] loop1: p2 < > p3 p4 [ 1582.519318][T22863] loop1: partition table partially beyond EOD, truncated [ 1582.526720][T22863] loop1: p2 start 3774873600 is beyond EOD, truncated [ 1582.534257][T22863] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1582.541751][T22863] loop1: p4 size 3657465856 extends beyond EOD, truncated 18:22:28 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005002900000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1582.677182][T22874] FAULT_INJECTION: forcing a failure. [ 1582.677182][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.689865][T22874] CPU: 0 PID: 22874 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1582.701465][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.711492][T22874] Call Trace: [ 1582.714761][T22874] dump_stack+0x18e/0x1de [ 1582.719079][T22874] should_fail+0x5d8/0x740 [ 1582.723468][T22874] ? alloc_uevent_skb+0x73/0x220 [ 1582.728373][T22874] should_failslab+0x5/0x20 [ 1582.732843][T22874] __kmalloc_track_caller+0x5d/0x2e0 [ 1582.738096][T22874] ? kmem_cache_alloc+0x115/0x290 [ 1582.743089][T22874] ? alloc_uevent_skb+0x73/0x220 [ 1582.747997][T22874] __alloc_skb+0xaf/0x4d0 [ 1582.752295][T22874] ? netlink_has_listeners+0x48/0x190 [ 1582.757635][T22874] alloc_uevent_skb+0x73/0x220 [ 1582.762370][T22874] kobject_uevent_env+0xaee/0x1000 [ 1582.767453][T22874] device_add+0xecf/0x1820 [ 1582.771838][T22874] device_create_vargs+0x1b8/0x210 [ 1582.776919][T22874] device_create+0x86/0xb0 [ 1582.781303][T22874] ? vsnprintf+0x1a07/0x1aa0 [ 1582.785861][T22874] bdi_register_va+0x89/0x5e0 [ 1582.790503][T22874] bdi_register+0x80/0xa0 [ 1582.794801][T22874] ? __device_add_disk+0x50a/0x1220 [ 1582.799965][T22874] bdi_register_owner+0x56/0xf0 [ 1582.804781][T22874] __device_add_disk+0x583/0x1220 [ 1582.809788][T22874] loop_add+0x554/0x710 [ 1582.813930][T22874] loop_control_ioctl+0x468/0x680 [ 1582.818930][T22874] ? xor_init+0x60/0x60 [ 1582.823068][T22874] do_vfs_ioctl+0x6fb/0x15b0 [ 1582.827635][T22874] __x64_sys_ioctl+0xd4/0x110 [ 1582.832285][T22874] do_syscall_64+0xcb/0x1e0 [ 1582.836759][T22874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1582.842661][T22874] RIP: 0033:0x7f2c46c0dae9 [ 1582.847046][T22874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1582.866617][T22874] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:22:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000050000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 68) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1582.874997][T22874] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1582.882938][T22874] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1582.890934][T22874] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1582.898877][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1582.906819][T22874] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800fffffffd0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1582.994483][T22875] loop5: p2 < > p3 p4 [ 1582.998681][T22875] loop5: p2 size 2 extends beyond EOD, truncated [ 1583.016601][T22875] loop5: p3 start 225 is beyond EOD, truncated [ 1583.022756][T22875] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1583.054884][T22871] loop3: p2 < > p3 p4 [ 1583.059255][T22871] loop3: p2 size 2 extends beyond EOD, truncated [ 1583.066516][T22871] loop3: p3 start 225 is beyond EOD, truncated [ 1583.072724][T22871] loop3: p4 start 1207959552 is beyond EOD, truncated [ 1583.096519][T22888] FAULT_INJECTION: forcing a failure. [ 1583.096519][T22888] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.109711][T22888] CPU: 0 PID: 22888 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1583.121305][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.131332][T22888] Call Trace: [ 1583.134633][T22888] dump_stack+0x18e/0x1de [ 1583.138953][T22888] should_fail+0x5d8/0x740 [ 1583.138969][T22888] ? alloc_uevent_skb+0x73/0x220 [ 1583.148270][T22888] should_failslab+0x5/0x20 [ 1583.152744][T22888] __kmalloc_track_caller+0x5d/0x2e0 [ 1583.158000][T22888] ? kmem_cache_alloc+0x115/0x290 [ 1583.162997][T22888] ? alloc_uevent_skb+0x73/0x220 [ 1583.167907][T22888] __alloc_skb+0xaf/0x4d0 [ 1583.172239][T22888] ? mutex_lock+0x6c/0xc0 [ 1583.176539][T22888] alloc_uevent_skb+0x73/0x220 [ 1583.181271][T22888] kobject_uevent_env+0xaee/0x1000 [ 1583.186352][T22888] device_add+0xecf/0x1820 [ 1583.190739][T22888] device_create_vargs+0x1b8/0x210 [ 1583.195827][T22888] device_create+0x86/0xb0 [ 1583.200224][T22888] ? vsnprintf+0x1a07/0x1aa0 [ 1583.204800][T22888] bdi_register_va+0x89/0x5e0 [ 1583.209455][T22888] bdi_register+0x80/0xa0 [ 1583.213751][T22888] ? __device_add_disk+0x50a/0x1220 [ 1583.218926][T22888] bdi_register_owner+0x56/0xf0 [ 1583.223747][T22888] __device_add_disk+0x583/0x1220 [ 1583.228751][T22888] loop_add+0x554/0x710 [ 1583.232878][T22888] loop_control_ioctl+0x468/0x680 [ 1583.237871][T22888] ? xor_init+0x60/0x60 [ 1583.241997][T22888] do_vfs_ioctl+0x6fb/0x15b0 [ 1583.246559][T22888] __x64_sys_ioctl+0xd4/0x110 [ 1583.251208][T22888] do_syscall_64+0xcb/0x1e0 [ 1583.255679][T22888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1583.261541][T22888] RIP: 0033:0x7f2c46c0dae9 [ 1583.265925][T22888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.285497][T22888] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.293877][T22888] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1583.301818][T22888] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1583.309756][T22888] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.317693][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.325632][T22888] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:28 executing program 5: syz_read_part_table(0xe1, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 69) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1583.431516][T22883] loop2: p2 < > p3 p4 [ 1583.435754][T22883] loop2: p2 size 2 extends beyond EOD, truncated [ 1583.442489][T22883] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1583.450181][T22883] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:29 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000004c008000da55aa", 0x40, 0x1c0}]) [ 1583.561286][ T155] loop2: p2 < > p3 p4 [ 1583.565499][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1583.572159][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1583.579721][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1583.605506][T22889] loop4: p2 < > p3 p4 [ 1583.609667][T22889] loop4: partition table partially beyond EOD, truncated [ 1583.616867][T22889] loop4: p2 start 83886080 is beyond EOD, truncated [ 1583.623496][T22889] loop4: p3 start 225 is beyond EOD, truncated [ 1583.629653][T22889] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1583.646222][T23002] loop3: p2 < > p3 p4 [ 1583.650451][T23002] loop3: p2 size 2 extends beyond EOD, truncated [ 1583.657412][T23002] loop3: p3 start 225 is beyond EOD, truncated [ 1583.663612][T23002] loop3: p4 start 1275068416 is beyond EOD, truncated [ 1583.684594][T22899] loop1: p2 < > p3 p4 [ 1583.688761][T22899] loop1: partition table partially beyond EOD, truncated [ 1583.696075][T22899] loop1: p2 start 4261412863 is beyond EOD, truncated [ 1583.702930][T22899] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1583.710670][T22899] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1583.776334][T23007] FAULT_INJECTION: forcing a failure. [ 1583.776334][T23007] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.789041][T23007] CPU: 0 PID: 23007 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1583.800646][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.810709][T23007] Call Trace: [ 1583.813987][T23007] dump_stack+0x18e/0x1de [ 1583.818297][T23007] should_fail+0x5d8/0x740 [ 1583.822690][T23007] ? alloc_uevent_skb+0x73/0x220 [ 1583.827604][T23007] should_failslab+0x5/0x20 [ 1583.832121][T23007] __kmalloc_track_caller+0x5d/0x2e0 [ 1583.837372][T23007] ? kmem_cache_alloc+0x115/0x290 [ 1583.842366][T23007] ? alloc_uevent_skb+0x73/0x220 [ 1583.847273][T23007] __alloc_skb+0xaf/0x4d0 [ 1583.851575][T23007] ? mutex_lock+0x6c/0xc0 [ 1583.855874][T23007] alloc_uevent_skb+0x73/0x220 [ 1583.860608][T23007] kobject_uevent_env+0xaee/0x1000 [ 1583.865690][T23007] device_add+0xecf/0x1820 [ 1583.870081][T23007] device_create_vargs+0x1b8/0x210 [ 1583.875164][T23007] device_create+0x86/0xb0 [ 1583.879555][T23007] ? vsnprintf+0x1a07/0x1aa0 [ 1583.884118][T23007] bdi_register_va+0x89/0x5e0 [ 1583.888769][T23007] bdi_register+0x80/0xa0 [ 1583.893070][T23007] ? __device_add_disk+0x50a/0x1220 [ 1583.898250][T23007] bdi_register_owner+0x56/0xf0 [ 1583.903082][T23007] __device_add_disk+0x583/0x1220 [ 1583.908078][T23007] loop_add+0x554/0x710 [ 1583.912200][T23007] loop_control_ioctl+0x468/0x680 [ 1583.917193][T23007] ? xor_init+0x60/0x60 [ 1583.921317][T23007] do_vfs_ioctl+0x6fb/0x15b0 [ 1583.925885][T23007] __x64_sys_ioctl+0xd4/0x110 [ 1583.930532][T23007] do_syscall_64+0xcb/0x1e0 [ 1583.935006][T23007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1583.940864][T23007] RIP: 0033:0x7f2c46c0dae9 [ 1583.945245][T23007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.964857][T23007] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.973235][T23007] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1583.981179][T23007] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1583.989119][T23007] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.997057][T23007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.005039][T23007] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:29 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000060008000da55aa", 0x40, 0x1c0}]) 18:22:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 70) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000060000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:29 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005006400000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080000000fff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1584.174467][T23005] loop5: p2 < > p3 p4 [ 1584.178764][T23005] loop5: p2 size 2 extends beyond EOD, truncated [ 1584.187409][T23005] loop5: p3 start 225 is beyond EOD, truncated [ 1584.193722][T23005] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1584.282773][T23016] FAULT_INJECTION: forcing a failure. [ 1584.282773][T23016] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.296675][T23016] CPU: 0 PID: 23016 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1584.308287][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.318317][T23016] Call Trace: [ 1584.321583][T23016] dump_stack+0x18e/0x1de [ 1584.325889][T23016] should_fail+0x5d8/0x740 18:22:29 executing program 5: syz_read_part_table(0x1c8, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1584.330294][T23016] ? skb_clone+0x1b2/0x360 [ 1584.330311][T23016] should_failslab+0x5/0x20 [ 1584.339178][T23016] kmem_cache_alloc+0x36/0x290 [ 1584.343929][T23016] ? string+0x280/0x2c0 [ 1584.348070][T23016] skb_clone+0x1b2/0x360 [ 1584.352304][T23016] netlink_broadcast_filtered+0x5e1/0x10b0 [ 1584.358091][T23016] ? skb_put+0x101/0x1e0 [ 1584.362308][T23016] netlink_broadcast+0x35/0x50 [ 1584.367044][T23016] kobject_uevent_env+0xb1f/0x1000 [ 1584.372134][T23016] device_add+0xecf/0x1820 [ 1584.376528][T23016] device_create_vargs+0x1b8/0x210 [ 1584.381632][T23016] device_create+0x86/0xb0 [ 1584.386024][T23016] ? device_create+0x1/0xb0 [ 1584.390499][T23016] bdi_register_va+0x89/0x5e0 [ 1584.395150][T23016] bdi_register+0x80/0xa0 [ 1584.399451][T23016] ? __device_add_disk+0x50a/0x1220 [ 1584.404620][T23016] bdi_register_owner+0x56/0xf0 [ 1584.409442][T23016] __device_add_disk+0x583/0x1220 [ 1584.414443][T23016] loop_add+0x554/0x710 [ 1584.418573][T23016] loop_control_ioctl+0x468/0x680 [ 1584.423567][T23016] ? xor_init+0x60/0x60 [ 1584.427697][T23016] do_vfs_ioctl+0x6fb/0x15b0 [ 1584.432263][T23016] __x64_sys_ioctl+0xd4/0x110 [ 1584.436923][T23016] do_syscall_64+0xcb/0x1e0 [ 1584.441398][T23016] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1584.447262][T23016] RIP: 0033:0x7f2c46c0dae9 [ 1584.451647][T23016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1584.471222][T23016] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.479602][T23016] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1584.487544][T23016] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1584.495487][T23016] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.503432][T23016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.511373][T23016] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 71) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1584.564073][T23015] loop3: p2 < > p3 p4 [ 1584.568261][T23015] loop3: p2 size 2 extends beyond EOD, truncated [ 1584.575214][T23015] loop3: p3 start 225 is beyond EOD, truncated [ 1584.581417][T23015] loop3: p4 start 1610612736 is beyond EOD, truncated [ 1584.774589][T23028] loop4: p2 < > p3 p4 [ 1584.778671][T23028] loop4: partition table partially beyond EOD, truncated [ 1584.786055][T23028] loop4: p2 start 100663296 is beyond EOD, truncated [ 1584.792708][T23028] loop4: p3 start 225 is beyond EOD, truncated [ 1584.799038][T23028] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1584.814852][T23027] loop1: p2 < > p3 p4 18:22:30 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000068008000da55aa", 0x40, 0x1c0}]) [ 1584.821477][ T155] loop2: p2 < > p3 p4 [ 1584.821690][T23027] loop1: partition table partially beyond EOD, truncated [ 1584.826072][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1584.833888][T23027] loop1: p2 start 4279173120 is beyond EOD, truncated [ 1584.840284][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1584.851204][T23027] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1584.853772][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1584.863137][T23027] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1584.875827][T23023] loop2: p2 < > p3 p4 [ 1584.880021][T23023] loop2: p2 size 2 extends beyond EOD, truncated [ 1584.886981][T23033] loop5: p2 < > p3 p4 [ 1584.887427][T23037] FAULT_INJECTION: forcing a failure. [ 1584.887427][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.891200][T23033] loop5: p2 size 2 extends beyond EOD, truncated [ 1584.903658][T23037] CPU: 1 PID: 23037 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1584.903669][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.910802][T23023] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1584.921550][T23037] Call Trace: [ 1584.921565][T23037] dump_stack+0x18e/0x1de [ 1584.921578][T23037] should_fail+0x5d8/0x740 [ 1584.921589][T23037] ? security_inode_alloc+0x32/0x1d0 [ 1584.921604][T23037] should_failslab+0x5/0x20 [ 1584.932390][T23033] loop5: p3 start 225 is beyond EOD, truncated [ 1584.938714][T23037] kmem_cache_alloc+0x36/0x290 [ 1584.938728][T23037] security_inode_alloc+0x32/0x1d0 [ 1584.938738][T23037] inode_init_always+0x387/0x810 [ 1584.938747][T23037] new_inode_pseudo+0x90/0x220 [ 1584.938755][T23037] new_inode+0x25/0x1d0 [ 1584.938768][T23037] ? start_creating+0x183/0x270 [ 1584.942109][T23033] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1584.946319][T23037] debugfs_create_dir+0x68/0x3f0 [ 1584.946331][T23037] bdi_register_va+0x232/0x5e0 [ 1584.946341][T23037] bdi_register+0x80/0xa0 [ 1584.946355][T23037] ? __device_add_disk+0x50a/0x1220 [ 1584.951289][T23023] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1584.955986][T23037] bdi_register_owner+0x56/0xf0 [ 1584.955996][T23037] __device_add_disk+0x583/0x1220 [ 1584.956009][T23037] loop_add+0x554/0x710 [ 1584.956023][T23037] loop_control_ioctl+0x468/0x680 [ 1585.047125][T23037] ? xor_init+0x60/0x60 [ 1585.051271][T23037] do_vfs_ioctl+0x6fb/0x15b0 [ 1585.055846][T23037] __x64_sys_ioctl+0xd4/0x110 [ 1585.060493][T23037] do_syscall_64+0xcb/0x1e0 [ 1585.064964][T23037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1585.070825][T23037] RIP: 0033:0x7f2c46c0dae9 [ 1585.075216][T23037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.094800][T23037] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1585.103187][T23037] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1585.111129][T23037] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1585.119070][T23037] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.127015][T23037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.134959][T23037] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1585.143081][T23037] debugfs: out of free dentries, can not create directory '7:11' 18:22:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 72) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffffefff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1585.298851][T26898] udevd[26898]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1585.298965][ T392] udevd[392]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory 18:22:30 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000007000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000004060000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:30 executing program 5: syz_read_part_table(0x1ce, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1585.349392][ T155] loop2: p2 < > p3 p4 [ 1585.355363][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1585.363496][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1585.370933][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1585.394796][T23046] loop3: p2 < > p3 p4 [ 1585.399076][T23046] loop3: p2 size 2 extends beyond EOD, truncated [ 1585.401641][T23048] FAULT_INJECTION: forcing a failure. [ 1585.401641][T23048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1585.406584][T23046] loop3: p3 start 225 is beyond EOD, truncated [ 1585.406591][T23046] loop3: p4 start 1744830464 is beyond EOD, truncated [ 1585.432789][T23048] CPU: 0 PID: 23048 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1585.444386][T23048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.444390][T23048] Call Trace: [ 1585.444410][T23048] dump_stack+0x18e/0x1de [ 1585.461995][T23048] should_fail+0x5d8/0x740 [ 1585.466395][T23048] __alloc_pages_nodemask+0x12e/0x740 [ 1585.471742][T23048] alloc_slab_page+0x39/0x3e0 [ 1585.476390][T23048] new_slab+0x97/0x460 [ 1585.480436][T23048] ___slab_alloc+0x330/0x4c0 [ 1585.485006][T23048] ? should_fail+0x13b/0x740 [ 1585.489562][T23048] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 1585.495077][T23048] ? check_preemption_disabled+0xde/0x2c0 [ 1585.500763][T23048] ? new_inode_pseudo+0x79/0x220 [ 1585.505666][T23048] ? new_inode_pseudo+0x79/0x220 [ 1585.510571][T23048] kmem_cache_alloc+0x18b/0x290 [ 1585.515390][T23048] new_inode_pseudo+0x79/0x220 [ 1585.520121][T23048] new_inode+0x25/0x1d0 [ 1585.524250][T23048] ? start_creating+0x183/0x270 [ 1585.529071][T23048] debugfs_create_dir+0x68/0x3f0 [ 1585.533976][T23048] bdi_register_va+0x232/0x5e0 [ 1585.538706][T23048] bdi_register+0x80/0xa0 [ 1585.543006][T23048] ? __device_add_disk+0x50a/0x1220 [ 1585.548188][T23048] bdi_register_owner+0x56/0xf0 [ 1585.553014][T23048] __device_add_disk+0x583/0x1220 [ 1585.558007][T23048] loop_add+0x554/0x710 [ 1585.562135][T23048] loop_control_ioctl+0x468/0x680 [ 1585.567130][T23048] ? xor_init+0x60/0x60 [ 1585.571257][T23048] do_vfs_ioctl+0x6fb/0x15b0 [ 1585.575818][T23048] __x64_sys_ioctl+0xd4/0x110 [ 1585.580464][T23048] do_syscall_64+0xcb/0x1e0 [ 1585.584939][T23048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1585.590798][T23048] RIP: 0033:0x7f2c46c0dae9 [ 1585.595179][T23048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.614787][T23048] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1585.623172][T23048] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1585.631115][T23048] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1585.639098][T23048] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 18:22:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 73) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1585.647036][T23048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.654976][T23048] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:31 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000006c008000da55aa", 0x40, 0x1c0}]) [ 1585.884004][T23055] loop5: p2 < > p3 p4 [ 1585.889187][T23064] FAULT_INJECTION: forcing a failure. [ 1585.889187][T23064] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.889351][T23055] loop5: p2 size 2 extends beyond EOD, truncated [ 1585.901816][T23064] CPU: 1 PID: 23064 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1585.909242][T23055] loop5: p3 start 225 is beyond EOD, truncated [ 1585.919706][T23064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.919709][T23064] Call Trace: [ 1585.919724][T23064] dump_stack+0x18e/0x1de [ 1585.919736][T23064] should_fail+0x5d8/0x740 [ 1585.919746][T23064] ? __d_alloc+0x2a/0x6a0 [ 1585.919755][T23064] should_failslab+0x5/0x20 [ 1585.919768][T23064] kmem_cache_alloc+0x36/0x290 [ 1585.925988][T23055] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1585.935918][T23064] ? stack_trace_save+0xc4/0x160 [ 1585.935928][T23064] __d_alloc+0x2a/0x6a0 [ 1585.935937][T23064] ? save_stack+0x107/0x170 [ 1585.935947][T23064] d_alloc_parallel+0x7d/0x12b0 [ 1585.935954][T23064] ? avc_has_perm_noaudit+0x2fc/0x380 [ 1585.935966][T23064] ? avc_has_perm_noaudit+0x2b0/0x380 [ 1585.997474][T23064] ? __d_lookup+0x4b8/0x510 [ 1586.001951][T23064] __lookup_slow+0xef/0x3b0 [ 1586.006431][T23064] lookup_one_len+0x11d/0x210 [ 1586.011082][T23064] start_creating+0xec/0x270 [ 1586.015646][T23064] __debugfs_create_file+0x74/0x460 [ 1586.020830][T23064] ? debugfs_create_dir+0x302/0x3f0 [ 1586.026013][T23064] bdi_register_va+0x274/0x5e0 [ 1586.030753][T23064] bdi_register+0x80/0xa0 [ 1586.035057][T23064] ? __device_add_disk+0x50a/0x1220 [ 1586.040228][T23064] bdi_register_owner+0x56/0xf0 [ 1586.045050][T23064] __device_add_disk+0x583/0x1220 [ 1586.050053][T23064] loop_add+0x554/0x710 [ 1586.054183][T23064] loop_control_ioctl+0x468/0x680 [ 1586.059177][T23064] ? xor_init+0x60/0x60 [ 1586.063307][T23064] do_vfs_ioctl+0x6fb/0x15b0 [ 1586.067872][T23064] __x64_sys_ioctl+0xd4/0x110 [ 1586.072520][T23064] do_syscall_64+0xcb/0x1e0 [ 1586.076998][T23064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1586.082860][T23064] RIP: 0033:0x7f2c46c0dae9 [ 1586.087247][T23064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.106834][T23064] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.115214][T23064] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1586.123158][T23064] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1586.131104][T23064] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.139058][T23064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1586.147004][T23064] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 74) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1586.235610][T23060] loop4: p2 < > p3 p4 [ 1586.239796][T23060] loop4: partition table partially beyond EOD, truncated [ 1586.247103][T23060] loop4: p2 start 100925440 is beyond EOD, truncated [ 1586.254154][T23060] loop4: p3 start 225 is beyond EOD, truncated [ 1586.260354][T23060] loop4: p4 size 3657465856 extends beyond EOD, truncated 18:22:31 executing program 5: syz_read_part_table(0x204, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1586.343602][T23057] loop2: p2 < > p3 p4 [ 1586.347852][T23057] loop2: p2 size 2 extends beyond EOD, truncated [ 1586.356408][T23057] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1586.364073][T23057] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1586.413758][T23072] loop3: p2 < > p3 p4 [ 1586.417943][T23072] loop3: p2 size 2 extends beyond EOD, truncated [ 1586.424920][T23072] loop3: p3 start 225 is beyond EOD, truncated [ 1586.431095][T23072] loop3: p4 start 1811939328 is beyond EOD, truncated [ 1586.454474][T23076] FAULT_INJECTION: forcing a failure. [ 1586.454474][T23076] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.455315][T23069] loop1: p2 < > p3 p4 [ 1586.467095][T23076] CPU: 1 PID: 23076 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1586.471202][T23069] loop1: partition table partially beyond EOD, truncated [ 1586.482721][T23076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.482725][T23076] Call Trace: [ 1586.482740][T23076] dump_stack+0x18e/0x1de [ 1586.482752][T23076] should_fail+0x5d8/0x740 [ 1586.482764][T23076] ? new_inode_pseudo+0x79/0x220 [ 1586.482779][T23076] should_failslab+0x5/0x20 [ 1586.490282][T23069] loop1: p2 start 4293918719 is beyond EOD, truncated [ 1586.499792][T23076] kmem_cache_alloc+0x36/0x290 [ 1586.499804][T23076] new_inode_pseudo+0x79/0x220 [ 1586.499813][T23076] new_inode+0x25/0x1d0 [ 1586.499823][T23076] ? start_creating+0x183/0x270 [ 1586.499832][T23076] __debugfs_create_file+0xb5/0x460 [ 1586.499841][T23076] ? debugfs_create_dir+0x302/0x3f0 [ 1586.499851][T23076] bdi_register_va+0x274/0x5e0 [ 1586.499863][T23076] bdi_register+0x80/0xa0 [ 1586.504028][T23069] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1586.507416][T23076] ? __device_add_disk+0x50a/0x1220 [ 1586.507428][T23076] bdi_register_owner+0x56/0xf0 [ 1586.507438][T23076] __device_add_disk+0x583/0x1220 [ 1586.507452][T23076] loop_add+0x554/0x710 [ 1586.512493][T23069] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1586.516746][T23076] loop_control_ioctl+0x468/0x680 [ 1586.516755][T23076] ? xor_init+0x60/0x60 [ 1586.516765][T23076] do_vfs_ioctl+0x6fb/0x15b0 [ 1586.516779][T23076] __x64_sys_ioctl+0xd4/0x110 [ 1586.516788][T23076] do_syscall_64+0xcb/0x1e0 [ 1586.516798][T23076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1586.516806][T23076] RIP: 0033:0x7f2c46c0dae9 [ 1586.516814][T23076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.516818][T23076] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.516827][T23076] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1586.516832][T23076] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1586.516837][T23076] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.516842][T23076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1586.516847][T23076] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1586.516883][T23076] debugfs: out of free dentries, can not create file 'stats' 18:22:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000070000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 75) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:32 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005009607000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000fffff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1586.889182][T23087] FAULT_INJECTION: forcing a failure. [ 1586.889182][T23087] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.902073][T23087] CPU: 1 PID: 23087 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1586.902078][T23087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.902081][T23087] Call Trace: [ 1586.902097][T23087] dump_stack+0x18e/0x1de [ 1586.902112][T23087] should_fail+0x5d8/0x740 [ 1586.902125][T23087] ? security_inode_alloc+0x32/0x1d0 [ 1586.902135][T23087] should_failslab+0x5/0x20 [ 1586.902144][T23087] kmem_cache_alloc+0x36/0x290 [ 1586.902156][T23087] security_inode_alloc+0x32/0x1d0 [ 1586.902166][T23087] inode_init_always+0x387/0x810 [ 1586.902177][T23087] new_inode_pseudo+0x90/0x220 [ 1586.902186][T23087] new_inode+0x25/0x1d0 [ 1586.902195][T23087] ? start_creating+0x183/0x270 [ 1586.902205][T23087] debugfs_create_dir+0x68/0x3f0 [ 1586.902215][T23087] bdi_register_va+0x232/0x5e0 [ 1586.902225][T23087] bdi_register+0x80/0xa0 [ 1586.902234][T23087] ? __device_add_disk+0x50a/0x1220 [ 1586.902245][T23087] bdi_register_owner+0x56/0xf0 [ 1586.902255][T23087] __device_add_disk+0x583/0x1220 [ 1586.902268][T23087] loop_add+0x554/0x710 [ 1586.902278][T23087] loop_control_ioctl+0x468/0x680 [ 1586.902286][T23087] ? xor_init+0x60/0x60 [ 1586.902296][T23087] do_vfs_ioctl+0x6fb/0x15b0 [ 1586.902312][T23087] __x64_sys_ioctl+0xd4/0x110 [ 1586.902321][T23087] do_syscall_64+0xcb/0x1e0 [ 1586.902332][T23087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1586.902341][T23087] RIP: 0033:0x7f2c46c0dae9 [ 1586.902349][T23087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.902354][T23087] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.902363][T23087] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1586.902368][T23087] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1586.902373][T23087] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.902378][T23087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1586.902383][T23087] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1586.902406][T23087] debugfs: out of free dentries, can not create directory '7:11' [ 1586.942373][ T155] loop2: p2 < > p3 p4 [ 1587.125734][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1587.132525][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated 18:22:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 76) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1587.140191][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated 18:22:32 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000074008000da55aa", 0x40, 0x1c0}]) [ 1587.287120][T23085] loop5: p2 < > p3 p4 [ 1587.299321][T23085] loop5: p2 size 2 extends beyond EOD, truncated [ 1587.306344][T23085] loop5: p3 start 225 is beyond EOD, truncated [ 1587.312539][T23085] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1587.324469][T23099] loop4: p2 < > p3 p4 [ 1587.328525][T23099] loop4: partition table partially beyond EOD, truncated [ 1587.335738][T23099] loop4: p2 start 117440512 is beyond EOD, truncated [ 1587.342386][T23099] loop4: p3 start 225 is beyond EOD, truncated [ 1587.348652][T23099] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1587.393831][T23100] loop1: p2 < > p3 p4 [ 1587.398055][T23100] loop1: partition table partially beyond EOD, truncated [ 1587.405293][T23100] loop1: p2 start 4294905600 is beyond EOD, truncated [ 1587.412293][T23100] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1587.420045][T23100] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1587.454000][T23108] loop3: p2 < > p3 p4 [ 1587.458225][T23108] loop3: p2 size 2 extends beyond EOD, truncated [ 1587.461118][T23106] FAULT_INJECTION: forcing a failure. [ 1587.461118][T23106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1587.465427][T23108] loop3: p3 start 225 is beyond EOD, truncated [ 1587.477992][T23106] CPU: 0 PID: 23106 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1587.484323][T23108] loop3: p4 start 1946157056 is beyond EOD, truncated [ 1587.495692][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.495695][T23106] Call Trace: [ 1587.495710][T23106] dump_stack+0x18e/0x1de [ 1587.495726][T23106] should_fail+0x5d8/0x740 [ 1587.524403][T23106] __alloc_pages_nodemask+0x12e/0x740 [ 1587.529751][T23106] __get_free_pages+0xa/0x30 [ 1587.534310][T23106] inode_doinit_with_dentry+0x8d4/0x1170 [ 1587.539912][T23106] security_d_instantiate+0xa5/0x100 [ 1587.545167][T23106] d_instantiate+0x51/0x90 [ 1587.549551][T23106] __debugfs_create_file+0x256/0x460 [ 1587.554812][T23106] bdi_register_va+0x274/0x5e0 [ 1587.559543][T23106] bdi_register+0x80/0xa0 [ 1587.563847][T23106] ? __device_add_disk+0x50a/0x1220 [ 1587.569022][T23106] bdi_register_owner+0x56/0xf0 [ 1587.573850][T23106] __device_add_disk+0x583/0x1220 [ 1587.578865][T23106] loop_add+0x554/0x710 [ 1587.582995][T23106] loop_control_ioctl+0x468/0x680 [ 1587.587994][T23106] ? xor_init+0x60/0x60 [ 1587.592128][T23106] do_vfs_ioctl+0x6fb/0x15b0 [ 1587.596713][T23106] __x64_sys_ioctl+0xd4/0x110 [ 1587.601379][T23106] do_syscall_64+0xcb/0x1e0 [ 1587.605866][T23106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1587.611733][T23106] RIP: 0033:0x7f2c46c0dae9 [ 1587.616119][T23106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.635693][T23106] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1587.644075][T23106] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1587.652021][T23106] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1587.659965][T23106] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.667907][T23106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.675852][T23106] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800ffefffff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 77) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:22:33 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005009f07000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:33 executing program 5: syz_read_part_table(0x218, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000080000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:33 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff0000007a008000da55aa", 0x40, 0x1c0}]) [ 1587.807737][ T155] loop1: p2 < > p3 p4 [ 1587.814010][ T155] loop1: partition table partially beyond EOD, truncated [ 1587.821093][ T155] loop1: p2 start 4294905600 is beyond EOD, truncated [ 1587.828340][ T155] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1587.836802][ T155] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1587.936240][T23216] FAULT_INJECTION: forcing a failure. [ 1587.936240][T23216] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.948936][T23216] CPU: 0 PID: 23216 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1587.960531][T23216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.970555][T23216] Call Trace: [ 1587.973819][T23216] dump_stack+0x18e/0x1de [ 1587.978177][T23216] should_fail+0x5d8/0x740 [ 1587.982570][T23216] ? kobj_map+0x70/0x650 [ 1587.986780][T23216] should_failslab+0x5/0x20 [ 1587.991249][T23216] __kmalloc+0x5f/0x2f0 [ 1587.995378][T23216] kobj_map+0x70/0x650 [ 1587.999431][T23216] ? exact_match+0x10/0x10 [ 1588.003833][T23216] ? refcount_inc_checked+0x1a/0x50 [ 1588.009016][T23216] ? disk_check_events+0x580/0x580 [ 1588.014105][T23216] __device_add_disk+0x5ff/0x1220 [ 1588.019116][T23216] loop_add+0x554/0x710 [ 1588.023253][T23216] loop_control_ioctl+0x468/0x680 [ 1588.028261][T23216] ? xor_init+0x60/0x60 [ 1588.032396][T23216] do_vfs_ioctl+0x6fb/0x15b0 [ 1588.036963][T23216] __x64_sys_ioctl+0xd4/0x110 [ 1588.041612][T23216] do_syscall_64+0xcb/0x1e0 [ 1588.046104][T23216] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1588.051966][T23216] RIP: 0033:0x7f2c46c0dae9 [ 1588.056368][T23216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.075943][T23216] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.084333][T23216] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1588.092277][T23216] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1588.100221][T23216] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.108162][T23216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.116105][T23216] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 78) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1588.224655][T23219] loop2: p2 < > p3 p4 [ 1588.229128][T23219] loop2: p2 size 2 extends beyond EOD, truncated [ 1588.236102][T23219] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1588.243762][T23219] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1588.334017][T23231] loop3: p2 < > p3 p4 [ 1588.338160][T23231] loop3: p2 size 2 extends beyond EOD, truncated [ 1588.345061][T23231] loop3: p3 start 225 is beyond EOD, truncated [ 1588.351193][T23231] loop3: p4 start 2046820352 is beyond EOD, truncated [ 1588.364852][ T155] loop5: p2 < > p3 p4 [ 1588.368681][T23223] loop1: p2 < > p3 p4 [ 1588.369007][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1588.373082][T23223] loop1: partition table partially beyond EOD, truncated [ 1588.382325][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1588.386428][T23223] loop1: p2 start 4294963199 is beyond EOD, truncated [ 1588.392758][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1588.399252][T23223] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 1588.400115][T23223] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1588.422889][T23230] loop5: p2 < > p3 p4 [ 1588.427126][T23230] loop5: p2 size 2 extends beyond EOD, truncated [ 1588.434027][T23230] loop5: p3 start 225 is beyond EOD, truncated [ 1588.440195][T23230] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1588.463843][T23226] loop4: p2 < > p3 p4 [ 1588.468020][T23226] loop4: partition table partially beyond EOD, truncated [ 1588.468594][T23236] FAULT_INJECTION: forcing a failure. [ 1588.468594][T23236] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.475494][T23226] loop4: p2 start 134217728 is beyond EOD, truncated [ 1588.491645][T23236] CPU: 1 PID: 23236 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1588.491650][T23236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1588.491653][T23236] Call Trace: [ 1588.491670][T23236] dump_stack+0x18e/0x1de [ 1588.491686][T23236] should_fail+0x5d8/0x740 [ 1588.498838][T23226] loop4: p3 start 225 is beyond EOD, truncated [ 1588.509921][T23236] ? kobj_map+0x70/0x650 [ 1588.509932][T23236] should_failslab+0x5/0x20 [ 1588.509940][T23236] __kmalloc+0x5f/0x2f0 [ 1588.509950][T23236] kobj_map+0x70/0x650 [ 1588.509965][T23236] ? exact_match+0x10/0x10 [ 1588.520414][T23226] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1588.523248][T23236] ? refcount_inc_checked+0x1a/0x50 [ 1588.523258][T23236] ? disk_check_events+0x580/0x580 [ 1588.523268][T23236] __device_add_disk+0x5ff/0x1220 [ 1588.523281][T23236] loop_add+0x554/0x710 [ 1588.523293][T23236] loop_control_ioctl+0x468/0x680 [ 1588.590726][T23236] ? xor_init+0x60/0x60 [ 1588.590743][T23236] do_vfs_ioctl+0x6fb/0x15b0 [ 1588.599436][T23236] __x64_sys_ioctl+0xd4/0x110 [ 1588.604091][T23236] do_syscall_64+0xcb/0x1e0 [ 1588.608567][T23236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1588.614426][T23236] RIP: 0033:0x7f2c46c0dae9 [ 1588.618810][T23236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.638382][T23236] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.646758][T23236] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1588.654696][T23236] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1588.662635][T23236] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.670572][T23236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.678511][T23236] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 18:22:34 executing program 2: syz_read_part_table(0x0, 0x7, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500a607000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') sendfile(r0, r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (fail_nth: 79) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getresgid(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1588.799413][ T155] loop5: p2 < > p3 p4 [ 1588.804090][ T155] loop5: p2 size 2 extends beyond EOD, truncated [ 1588.810869][ T155] loop5: p3 start 225 is beyond EOD, truncated [ 1588.817585][ T155] loop5: p4 size 3657465856 extends beyond EOD, truncated 18:22:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000090000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000000000050008007fffffff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 18:22:34 executing program 3: pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000090008000da55aa", 0x40, 0x1c0}]) [ 1588.984269][T23246] FAULT_INJECTION: forcing a failure. [ 1588.984269][T23246] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.996902][T23246] CPU: 1 PID: 23246 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1589.008503][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.018529][T23246] Call Trace: [ 1589.021793][T23246] dump_stack+0x18e/0x1de [ 1589.026099][T23246] should_fail+0x5d8/0x740 [ 1589.030507][T23246] ? __kernfs_new_node+0x47/0x630 [ 1589.030523][T23246] should_failslab+0x5/0x20 [ 1589.039985][T23246] __kmalloc_track_caller+0x5d/0x2e0 [ 1589.045243][T23246] kstrdup_const+0x51/0x90 [ 1589.049631][T23246] __kernfs_new_node+0x47/0x630 [ 1589.054512][T23246] ? do_vfs_ioctl+0x6fb/0x15b0 [ 1589.059292][T23246] ? __x64_sys_ioctl+0xd4/0x110 [ 1589.064117][T23246] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1589.070155][T23246] kernfs_create_dir_ns+0x90/0x220 [ 1589.075237][T23246] sysfs_create_dir_ns+0x14e/0x2f0 [ 1589.080317][T23246] kobject_add_internal+0x595/0xbd0 [ 1589.085492][T23246] kobject_add+0x100/0x1a0 [ 1589.089887][T23246] device_add+0x417/0x1820 [ 1589.094282][T23246] ? dev_set_name+0x80/0xa0 [ 1589.098753][T23246] __device_add_disk+0x71a/0x1220 [ 1589.103746][T23246] loop_add+0x554/0x710 [ 1589.107869][T23246] loop_control_ioctl+0x468/0x680 [ 1589.112862][T23246] ? xor_init+0x60/0x60 [ 1589.116989][T23246] do_vfs_ioctl+0x6fb/0x15b0 [ 1589.121598][T23246] __x64_sys_ioctl+0xd4/0x110 [ 1589.126244][T23246] do_syscall_64+0xcb/0x1e0 [ 1589.130717][T23246] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1589.136577][T23246] RIP: 0033:0x7f2c46c0dae9 [ 1589.140959][T23246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1589.160531][T23246] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.168904][T23246] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1589.176842][T23246] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1589.184782][T23246] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.192719][T23246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.200972][T23246] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1589.209014][T23246] kobject_add_internal failed for loop11 (error: -12 parent: block) [ 1589.217012][T23246] kobject_add_internal failed for queue (error: -2 parent: loop11) [ 1589.225066][T23246] ------------[ cut here ]------------ [ 1589.230506][T23246] WARNING: CPU: 1 PID: 23246 at fs/sysfs/file.c:328 sysfs_create_files+0x1ef/0x380 [ 1589.239742][T23246] Modules linked in: [ 1589.243610][T23246] CPU: 1 PID: 23246 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1589.255193][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.265220][T23246] RIP: 0010:sysfs_create_files+0x1ef/0x380 [ 1589.270991][T23246] Code: 85 ed 0f 84 a4 00 00 00 e8 be 96 ae ff 89 eb 48 8b 6c 24 10 4c 8b 7c 24 28 e9 ad fe ff ff e8 a8 96 ae ff eb 05 e8 a1 96 ae ff <0f> 0b 41 bc ea ff ff ff eb 8d 3c 03 0f 8f a1 fe ff ff 48 8d 7c 24 [ 1589.290560][T23246] RSP: 0018:ffff88819250fc68 EFLAGS: 00010246 [ 1589.296644][T23246] RAX: ffffffff81b238bf RBX: 0000000000000000 RCX: 0000000000040000 [ 1589.304584][T23246] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1589.312524][T23246] RBP: ffff8881e72b20a0 R08: ffffffff821b27cc R09: ffffed10324a1f8b [ 1589.320501][T23246] R10: ffffed10324a1f8b R11: 0000000000000000 R12: dffffc0000000000 [ 1589.328438][T23246] R13: ffffffff84e29680 R14: dffffc0000000000 R15: ffff8881e72b2070 [ 1589.336374][T23246] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1589.345270][T23246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1589.351819][T23246] CR2: 0000000020003540 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1589.359760][T23246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1589.367700][T23246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1589.375636][T23246] Call Trace: [ 1589.378905][T23246] __device_add_disk+0xced/0x1220 [ 1589.383897][T23246] loop_add+0x554/0x710 [ 1589.388020][T23246] loop_control_ioctl+0x468/0x680 [ 1589.393011][T23246] ? xor_init+0x60/0x60 [ 1589.397134][T23246] do_vfs_ioctl+0x6fb/0x15b0 [ 1589.401698][T23246] __x64_sys_ioctl+0xd4/0x110 [ 1589.406342][T23246] do_syscall_64+0xcb/0x1e0 [ 1589.410815][T23246] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1589.416673][T23246] RIP: 0033:0x7f2c46c0dae9 [ 1589.421059][T23246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1589.440658][T23246] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.449041][T23246] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1589.456979][T23246] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1589.464917][T23246] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.472853][T23246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.480797][T23246] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1589.488753][T23246] ---[ end trace dcabad1d1d3cdec1 ]--- [ 1589.494224][T23246] ------------[ cut here ]------------ [ 1589.499672][T23246] kernfs: can not remove 'events', no directory [ 1589.505970][T23246] WARNING: CPU: 1 PID: 23246 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1589.515653][T23246] Modules linked in: [ 1589.519519][T23246] CPU: 1 PID: 23246 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1589.531103][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.541133][T23246] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1589.547252][T23246] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 00 c3 cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1589.566840][T23246] RSP: 0018:ffff88819250fc48 EFLAGS: 00010246 [ 1589.572872][T23246] RAX: 17307a2c9b5a1700 RBX: 0000000000000000 RCX: 0000000000040000 [ 1589.580811][T23246] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1589.588752][T23246] RBP: ffffffff84e29680 R08: ffffffff814b2a4c R09: ffffed10324a1f45 [ 1589.596688][T23246] R10: ffffed10324a1f45 R11: 0000000000000000 R12: 00000000ffffffea [ 1589.604629][T23246] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84e29740 [ 1589.612571][T23246] FS: 00007f2c44984700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1589.621466][T23246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1589.628036][T23246] CR2: 0000000020003540 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1589.635985][T23246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1589.643930][T23246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1589.651868][T23246] Call Trace: [ 1589.655135][T23246] sysfs_create_files+0x321/0x380 [ 1589.660132][T23246] __device_add_disk+0xced/0x1220 [ 1589.665126][T23246] loop_add+0x554/0x710 [ 1589.669253][T23246] loop_control_ioctl+0x468/0x680 [ 1589.674245][T23246] ? xor_init+0x60/0x60 [ 1589.678379][T23246] do_vfs_ioctl+0x6fb/0x15b0 [ 1589.682943][T23246] __x64_sys_ioctl+0xd4/0x110 [ 1589.687591][T23246] do_syscall_64+0xcb/0x1e0 [ 1589.692079][T23246] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1589.697942][T23246] RIP: 0033:0x7f2c46c0dae9 [ 1589.702327][T23246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1589.721898][T23246] RSP: 002b:00007f2c44984188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.730280][T23246] RAX: ffffffffffffffda RBX: 00007f2c46d20f60 RCX: 00007f2c46c0dae9 [ 1589.738222][T23246] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000006 [ 1589.746158][T23246] RBP: 00007f2c449841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.754105][T23246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.762063][T23246] R13: 00007fff45a24f2f R14: 00007f2c44984300 R15: 0000000000022000 [ 1589.762081][T23246] ---[ end trace dcabad1d1d3cdec2 ]--- [ 1589.775510][T23246] loop11: failed to create sysfs files for events 18:22:35 executing program 5: syz_read_part_table(0x230, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffffa5000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1589.785868][T23248] ------------[ cut here ]------------ [ 1589.787213][ T155] loop2: p2 < > p3 p4 [ 1589.791344][T23248] kernfs: can not remove 'events', no directory [ 1589.798090][ T155] loop2: p2 size 2 extends beyond EOD, truncated [ 1589.801721][T23248] WARNING: CPU: 1 PID: 23248 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1589.813343][ T155] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1589.817614][T23248] Modules linked in: [ 1589.817628][T23248] CPU: 1 PID: 23248 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1589.817638][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.825221][ T155] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1589.828585][T23248] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1589.828599][T23248] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 00 c3 cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1589.882969][T23248] RSP: 0018:ffff8881dafcfcf8 EFLAGS: 00010246 [ 1589.889006][T23248] RAX: 64cd0e42e9933300 RBX: 0000000000000000 RCX: 0000000000040000 [ 1589.896943][T23248] RDX: ffffc90000345000 RSI: 00000000000399e7 RDI: 00000000000399e8 [ 1589.904881][T23248] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: ffffed103ede9608 [ 1589.912821][T23248] R10: ffffed103ede9608 R11: 0000000000000000 R12: 0000000000000000 [ 1589.920769][T23248] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29740 [ 1589.928719][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1589.937618][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1589.944171][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1589.952113][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1589.960058][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1589.967998][T23248] Call Trace: [ 1589.971268][T23248] sysfs_remove_files+0x99/0xf0 [ 1589.976090][T23248] del_gendisk+0x259/0xb70 [ 1589.980482][T23248] ? radix_tree_delete_item+0x22a/0x320 [ 1589.986001][T23248] loop_control_ioctl+0x563/0x680 [ 1589.991007][T23248] ? xor_init+0x60/0x60 [ 1589.995311][T23248] do_vfs_ioctl+0x6fb/0x15b0 [ 1589.999877][T23248] __x64_sys_ioctl+0xd4/0x110 [ 1590.004527][T23248] do_syscall_64+0xcb/0x1e0 [ 1590.009003][T23248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1590.014868][T23248] RIP: 0033:0x7f2c46c0dae9 [ 1590.019257][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.038830][T23248] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.047210][T23248] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1590.055151][T23248] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000006 [ 1590.063101][T23248] RBP: 00007f2c46c67f6d R08: 0000000000000000 R09: 0000000000000000 [ 1590.071045][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.078987][T23248] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1590.086941][T23248] ---[ end trace dcabad1d1d3cdec3 ]--- [ 1590.093619][T23248] ------------[ cut here ]------------ [ 1590.095562][T23243] loop2: p2 < > p3 p4 [ 1590.099112][T23248] kernfs: can not remove 'events_async', no directory [ 1590.103407][T23243] loop2: p2 size 2 extends beyond EOD, truncated [ 1590.110228][T23248] WARNING: CPU: 1 PID: 23248 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1590.117103][T23243] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 1590.125850][T23248] Modules linked in: [ 1590.125863][T23248] CPU: 1 PID: 23248 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1590.125867][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.125880][T23248] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1590.125893][T23248] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 00 c3 cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1590.133517][T23243] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1590.136826][T23248] RSP: 0018:ffff8881dafcfcf8 EFLAGS: 00010246 [ 1590.136833][T23248] RAX: 64cd0e42e9933300 RBX: 0000000000000000 RCX: 0000000000040000 [ 1590.136838][T23248] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1590.136848][T23248] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: ffffed103ede9608 [ 1590.221086][T23248] R10: ffffed103ede9608 R11: 0000000000000000 R12: 0000000000000000 [ 1590.229029][T23248] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29880 [ 1590.236972][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1590.245872][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.252424][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1590.260368][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1590.268316][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1590.276261][T23248] Call Trace: [ 1590.279532][T23248] sysfs_remove_files+0x99/0xf0 [ 1590.284356][T23248] del_gendisk+0x259/0xb70 [ 1590.288745][T23248] ? radix_tree_delete_item+0x22a/0x320 [ 1590.294262][T23248] loop_control_ioctl+0x563/0x680 [ 1590.299257][T23248] ? xor_init+0x60/0x60 [ 1590.303385][T23248] do_vfs_ioctl+0x6fb/0x15b0 [ 1590.307951][T23248] __x64_sys_ioctl+0xd4/0x110 [ 1590.312600][T23248] do_syscall_64+0xcb/0x1e0 [ 1590.317076][T23248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1590.322938][T23248] RIP: 0033:0x7f2c46c0dae9 [ 1590.327324][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.346909][T23248] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.355289][T23248] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1590.363232][T23248] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000006 [ 1590.371175][T23248] RBP: 00007f2c46c67f6d R08: 0000000000000000 R09: 0000000000000000 [ 1590.379116][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.387074][T23248] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1590.395029][T23248] ---[ end trace dcabad1d1d3cdec4 ]--- [ 1590.401770][T23248] ------------[ cut here ]------------ [ 1590.407277][T23248] kernfs: can not remove 'events_poll_msecs', no directory [ 1590.414583][T23248] WARNING: CPU: 1 PID: 23248 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1590.424354][T23248] Modules linked in: [ 1590.428221][T23248] CPU: 1 PID: 23248 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1590.439804][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.449835][T23248] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1590.455953][T23248] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 00 c3 cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1590.475520][T23248] RSP: 0018:ffff8881dafcfcf8 EFLAGS: 00010246 [ 1590.481551][T23248] RAX: 64cd0e42e9933300 RBX: 0000000000000000 RCX: 0000000000040000 [ 1590.489492][T23248] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1590.497438][T23248] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: ffffed103b5f9f5b [ 1590.505375][T23248] R10: ffffed103b5f9f5b R11: 0000000000000000 R12: 0000000000000000 [ 1590.513313][T23248] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e298c0 [ 1590.521251][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1590.530151][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.536702][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1590.544642][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1590.552580][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1590.560530][T23248] Call Trace: [ 1590.563790][T23248] sysfs_remove_files+0x99/0xf0 [ 1590.568624][T23248] del_gendisk+0x259/0xb70 [ 1590.573007][T23248] ? radix_tree_delete_item+0x22a/0x320 [ 1590.578520][T23248] loop_control_ioctl+0x563/0x680 [ 1590.583511][T23248] ? xor_init+0x60/0x60 [ 1590.587635][T23248] do_vfs_ioctl+0x6fb/0x15b0 [ 1590.592195][T23248] __x64_sys_ioctl+0xd4/0x110 [ 1590.596839][T23248] do_syscall_64+0xcb/0x1e0 [ 1590.601311][T23248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1590.607172][T23248] RIP: 0033:0x7f2c46c0dae9 [ 1590.611556][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.631124][T23248] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:22:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f000000d880)={0x2020}, 0x2020) memfd_create(&(0x7f000000f8c0)=']\x00', 0x6) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00000000000500080080ffffff0000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1590.639501][T23248] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1590.647445][T23248] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000006 [ 1590.655418][T23248] RBP: 00007f2c46c67f6d R08: 0000000000000000 R09: 0000000000000000 [ 1590.663357][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.671297][T23248] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1590.679247][T23248] ---[ end trace dcabad1d1d3cdec5 ]--- [ 1590.684791][T23248] ------------[ cut here ]------------ [ 1590.690222][T23248] kernfs: can not remove 'bdi', no directory [ 1590.696282][T23248] WARNING: CPU: 1 PID: 23248 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1590.705980][T23248] Modules linked in: [ 1590.709845][T23248] CPU: 1 PID: 23248 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1590.721430][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.731459][T23248] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1590.737586][T23248] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 00 c3 cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1590.757176][T23248] RSP: 0018:ffff8881dafcfd38 EFLAGS: 00010246 [ 1590.763224][T23248] RAX: 64cd0e42e9933300 RBX: 0000000000000000 RCX: 0000000000040000 [ 1590.771162][T23248] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1590.779100][T23248] RBP: 0000000000000000 R08: ffffffff814b2a4c R09: ffffed103b5f9f63 [ 1590.787044][T23248] R10: ffffed103b5f9f63 R11: 0000000000000000 R12: 1ffff1103ce56400 [ 1590.794981][T23248] R13: ffff8881e72b24e8 R14: 0000000000000000 R15: ffffffff84e29160 [ 1590.802918][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1590.811812][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.818361][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1590.826304][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1590.834249][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1590.842204][T23248] Call Trace: [ 1590.845473][T23248] del_gendisk+0x543/0xb70 [ 1590.849863][T23248] loop_control_ioctl+0x563/0x680 [ 1590.854856][T23248] ? xor_init+0x60/0x60 [ 1590.858981][T23248] do_vfs_ioctl+0x6fb/0x15b0 [ 1590.863568][T23248] __x64_sys_ioctl+0xd4/0x110 [ 1590.868214][T23248] do_syscall_64+0xcb/0x1e0 [ 1590.872685][T23248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1590.878549][T23248] RIP: 0033:0x7f2c46c0dae9 [ 1590.882947][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.902517][T23248] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.910898][T23248] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1590.918837][T23248] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000006 [ 1590.926773][T23248] RBP: 00007f2c46c67f6d R08: 0000000000000000 R09: 0000000000000000 [ 1590.934723][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.942660][T23248] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1590.950612][T23248] ---[ end trace dcabad1d1d3cdec6 ]--- [ 1590.956895][T23248] stack segment: 0000 [#1] PREEMPT SMP KASAN [ 1590.962865][T23248] CPU: 1 PID: 23248 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00011-g0bbc71d87f4d #0 [ 1590.974467][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.984502][T23248] RIP: 0010:device_del+0xa3/0xf60 [ 1590.989500][T23248] Code: 00 74 08 4c 89 e7 e8 8c 76 0e ff 48 89 1c 24 41 bf c8 00 00 00 4d 03 3c 24 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <8a> 44 05 00 84 c0 0f 85 33 0e 00 00 45 0f b6 2f 44 89 eb 83 e3 01 [ 1591.009092][T23248] RSP: 0018:ffff8881dafcfce0 EFLAGS: 00010202 [ 1591.015129][T23248] RAX: dffffc0000000000 RBX: ffff8881e72b2070 RCX: 1ffff1103ce5641b [ 1591.023168][T23248] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881dafcfca0 [ 1591.031117][T23248] RBP: 0000000000000019 R08: dffffc0000000000 R09: ffffed103b5f9f95 [ 1591.039065][T23248] R10: ffffed103b5f9f95 R11: 0000000000000000 R12: ffff8881e72b20d8 [ 1591.047012][T23248] R13: 1ffff1103ce56485 R14: ffff8881e72b2110 R15: 00000000000000c8 [ 1591.054958][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1591.063861][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.070419][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1591.078365][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1591.086311][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1591.094252][T23248] Call Trace: [ 1591.097525][T23248] ? pm_runtime_set_memalloc_noio+0x205/0x270 [ 1591.103561][T23248] del_gendisk+0x94f/0xb70 [ 1591.107953][T23248] loop_control_ioctl+0x563/0x680 [ 1591.112948][T23248] ? xor_init+0x60/0x60 [ 1591.117076][T23248] do_vfs_ioctl+0x6fb/0x15b0 [ 1591.121643][T23248] __x64_sys_ioctl+0xd4/0x110 [ 1591.126292][T23248] do_syscall_64+0xcb/0x1e0 [ 1591.130770][T23248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1591.136637][T23248] RIP: 0033:0x7f2c46c0dae9 [ 1591.141024][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.160600][T23248] RSP: 002b:00007f2c44963188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1591.168982][T23248] RAX: ffffffffffffffda RBX: 00007f2c46d21020 RCX: 00007f2c46c0dae9 [ 1591.176925][T23248] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000006 [ 1591.184867][T23248] RBP: 00007f2c46c67f6d R08: 0000000000000000 R09: 0000000000000000 [ 1591.192809][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.200765][T23248] R13: 00007fff45a24f2f R14: 00007f2c44963300 R15: 0000000000022000 [ 1591.208718][T23248] Modules linked in: [ 1591.213841][T23248] ---[ end trace dcabad1d1d3cdec7 ]--- [ 1591.219306][T23248] RIP: 0010:device_del+0xa3/0xf60 [ 1591.224346][T23248] Code: 00 74 08 4c 89 e7 e8 8c 76 0e ff 48 89 1c 24 41 bf c8 00 00 00 4d 03 3c 24 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <8a> 44 05 00 84 c0 0f 85 33 0e 00 00 45 0f b6 2f 44 89 eb 83 e3 01 [ 1591.243987][T23248] RSP: 0018:ffff8881dafcfce0 EFLAGS: 00010202 [ 1591.250020][T23248] RAX: dffffc0000000000 RBX: ffff8881e72b2070 RCX: 1ffff1103ce5641b [ 1591.257980][T23248] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881dafcfca0 [ 1591.265949][T23248] RBP: 0000000000000019 R08: dffffc0000000000 R09: ffffed103b5f9f95 [ 1591.273915][T23248] R10: ffffed103b5f9f95 R11: 0000000000000000 R12: ffff8881e72b20d8 [ 1591.281869][T23248] R13: 1ffff1103ce56485 R14: ffff8881e72b2110 R15: 00000000000000c8 [ 1591.289840][T23248] FS: 00007f2c44963700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1591.298759][T23248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1591.305335][T23248] CR2: 00007ffc4d2228d8 CR3: 00000001915e8000 CR4: 00000000003406e0 [ 1591.313300][T23248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1591.321242][T23248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1591.329204][T23248] Kernel panic - not syncing: Fatal exception [ 1591.335500][T23248] Kernel Offset: disabled [ 1591.339807][T23248] Rebooting in 86400 seconds..