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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x7]}) 13:24:45 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181070fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x26c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:45 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000001d40)='l2tp\x00') 13:24:45 executing program 4: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 925.766312][T29043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 925.777499][T29047] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 925.791982][T29047] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x26d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 925.815089][T29041] loop3: p1 p2 p3 p4 [ 925.819244][T29041] loop3: partition table partially beyond EOD, truncated [ 925.827115][T29041] loop3: p1 start 712569 is beyond EOD, truncated [ 925.833771][T29041] loop3: p2 start 25 is beyond EOD, truncated [ 925.839910][T29041] loop3: p3 start 10 is beyond EOD, truncated [ 925.846150][T29041] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x8]}) [ 926.149160][T29041] loop3: p1 p2 p3 p4 [ 926.153364][T29041] loop3: partition table partially beyond EOD, truncated [ 926.161143][T29041] loop3: p1 start 712569 is beyond EOD, truncated [ 926.167807][T29041] loop3: p2 start 25 is beyond EOD, truncated [ 926.174069][T29041] loop3: p3 start 10 is beyond EOD, truncated [ 926.180216][T29041] loop3: p4 start 3976200192 is beyond EOD, truncated [ 926.449246][T29070] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 926.457788][T29070] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffa3f00a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 926.510989][T29068] loop2: p1 p2 p3 p4 [ 926.515864][T29068] loop2: p1 size 78398975 extends beyond EOD, truncated [ 926.550326][T29072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:24:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) 13:24:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000004800)='f2fs\x00', &(0x7f0000004840)='./file0\x00', 0x0, 0x1, &(0x7f0000005a80)=[{&(0x7f0000004980)="c74dae88037eb81eb4fe13d45f11842a8a9bf7407bb375d03a7ed2c96c5a35f991f3b313bd4118f6f199e6a14fae2844e68225db71b5ebe2121fe2650ae8e8a7545da9a8527a6fa8339faa21f9a021a19f152cb6af661d9876767b043476a013e2b21b98b802d97d86a7c2bdc3df7c1805feb2863aa7b31b67774944ce2188e09d1a460727f9e0dd1c40d369e325c2cf91c8611b83225bd14f99a0388d961d73d2fe5dff7dc7f333368ca0b604533aea0d1c38fc6c014fc03b34989114005bc9ca539b6614dfc404f1b7fc01749a9dc4068d22d1892ab98d7121f00f7cea753365e64d25aa1a8e73e98bed2fc2d3acbc79d6891f6d4b71c83d8bdb6f56e0e433e9076b1c1ec351c8f7534e34cf5ff477170559eb68418bc68e2b581619f6f2e1e87ef45c7eb53d1643adb6781301a0553027c33bcffb33a60d83ed30100c747ea57b7e0dfe02935e624fb28d1ae0bdbe64c14dc3d5f43b0239e4b3514b8e0774488bf5e2df697ac7833aaaa5a57994c7f17b7c22c6ad8431af82a5fdf43dd5090549f5385a8bc9c3a7540982546fbc0d2147ad94bc149687549830d41a9da1fd855a974c929bb9554d8631ccb630b48057e8fbc04a3d5c5e2e5c94690e2797cd5d6e182cbd1af873417547def30223102c5c455c69f83f4d38e54e9cb1e49e1490ba27eb4a7b1e43771762f2fea604c92a96fafd381146", 0x1f7, 0x9}], 0x0, &(0x7f0000005b00)) [ 926.642704][T29068] loop2: p2 size 100663296 extends beyond EOD, truncated [ 926.721302][T29068] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 926.730714][T29068] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x9]}) 13:24:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x26e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 927.004555][T29068] loop2: p1 p2 p3 p4 [ 927.011235][T29068] loop2: p1 size 78398975 extends beyond EOD, truncated [ 927.051653][T29097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 927.107797][T29068] loop2: p2 size 100663296 extends beyond EOD, truncated [ 927.133158][T29068] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 927.170077][T29068] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:47 executing program 5: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) [ 927.220981][T29107] loop3: p1 p2 p3 p4 [ 927.225189][T29107] loop3: partition table partially beyond EOD, truncated [ 927.232781][T29107] loop3: p1 start 716963 is beyond EOD, truncated [ 927.239728][T29107] loop3: p2 start 25 is beyond EOD, truncated [ 927.245943][T29107] loop3: p3 start 10 is beyond EOD, truncated [ 927.252110][T29107] loop3: p4 start 3976200192 is beyond EOD, truncated [ 927.313032][T29110] F2FS-fs (loop4): Unable to read 1th superblock [ 927.319997][T29110] F2FS-fs (loop4): Unable to read 2th superblock [ 927.395873][T29110] F2FS-fs (loop4): Unable to read 1th superblock [ 927.402384][T29110] F2FS-fs (loop4): Unable to read 2th superblock [ 927.416226][T29114] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 927.424724][T29114] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:47 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181080fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xa]}) 13:24:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x26f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 927.608079][T29107] loop3: p1 p2 p3 p4 [ 927.612159][T29107] loop3: partition table partially beyond EOD, truncated [ 927.622323][T29107] loop3: p1 start 716963 is beyond EOD, truncated [ 927.629548][T29107] loop3: p2 start 25 is beyond EOD, truncated [ 927.635809][T29107] loop3: p3 start 10 is beyond EOD, truncated [ 927.642034][T29107] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:47 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000500)='l2tp\x00') 13:24:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 927.894542][T29129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 927.975346][T29135] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 927.983709][T29135] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff880e0b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 928.159945][T29142] loop2: p1 p2 p3 p4 [ 928.164736][T29142] loop2: p1 size 78398975 extends beyond EOD, truncated 13:24:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x270, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:48 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2c800, 0x0) 13:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xb]}) [ 928.327974][T29142] loop2: p2 size 100663296 extends beyond EOD, truncated [ 928.406143][T29142] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 928.438038][T29142] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:48 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400021c0, 0x0) [ 928.566765][T29156] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 928.575159][T29156] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 928.701923][T29142] loop2: p1 p2 p3 p4 [ 928.706762][T29142] loop2: p1 size 78398975 extends beyond EOD, truncated [ 928.739689][T29142] loop2: p2 size 100663296 extends beyond EOD, truncated [ 928.739845][T29161] loop3: p1 p2 p3 p4 [ 928.754180][T29161] loop3: partition table partially beyond EOD, truncated [ 928.762577][T29161] loop3: p1 start 724616 is beyond EOD, truncated [ 928.769310][T29161] loop3: p2 start 25 is beyond EOD, truncated [ 928.775615][T29161] loop3: p3 start 10 is beyond EOD, truncated [ 928.781809][T29161] loop3: p4 start 3976200192 is beyond EOD, truncated [ 928.864768][T29142] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:24:48 executing program 4: perf_event_open(&(0x7f0000001640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 928.937525][T29142] loop2: p4 start 3976200192 is beyond EOD, truncated [ 928.971156][T29173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:24:48 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 929.198351][T29161] loop3: p1 p2 p3 p4 [ 929.202650][T29161] loop3: partition table partially beyond EOD, truncated [ 929.211356][T29161] loop3: p1 start 724616 is beyond EOD, truncated [ 929.218430][T29161] loop3: p2 start 25 is beyond EOD, truncated [ 929.225982][T29161] loop3: p3 start 10 is beyond EOD, truncated [ 929.233823][T29161] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:49 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181090fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x271, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xc]}) [ 929.559608][T29199] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 929.570320][T29199] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:49 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x60a083, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 13:24:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffa6270b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:24:49 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x202, 0x0) 13:24:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x272, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 929.868619][T29208] loop2: p1 p2 p3 p4 [ 929.875010][T29208] loop2: p1 size 78398975 extends beyond EOD, truncated 13:24:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xd]}) [ 929.944313][T29208] loop2: p2 size 100663296 extends beyond EOD, truncated [ 930.017796][T29208] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 930.032784][T29215] loop3: p1 p2 p3 p4 [ 930.037354][T29215] loop3: partition table partially beyond EOD, truncated [ 930.045228][T29215] loop3: p1 start 731046 is beyond EOD, truncated [ 930.051741][T29215] loop3: p2 start 25 is beyond EOD, truncated [ 930.058076][T29215] loop3: p3 start 10 is beyond EOD, truncated [ 930.064441][T29215] loop3: p4 start 3976200192 is beyond EOD, truncated [ 930.087480][T29208] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:50 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f00000013c0)={0xffffffffffffffff, 0x1}, 0xc) [ 930.430746][T29215] loop3: p1 p2 p3 p4 [ 930.431165][T29233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 930.434916][T29215] loop3: partition table partially beyond EOD, truncated [ 930.435364][T29215] loop3: p1 start 731046 is beyond EOD, truncated [ 930.466423][T29215] loop3: p2 start 25 is beyond EOD, truncated [ 930.472563][T29215] loop3: p3 start 10 is beyond EOD, truncated [ 930.478812][T29215] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000180)={0x0, @dev={0xac, 0x14, 0x14, 0x7e}, 0x0, 0x0, 'rr\x00'}, 0x2c) [ 930.565505][T29239] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 930.574022][T29239] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:50 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810a0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:50 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x321840, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 13:24:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x273, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xe]}) 13:24:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff46400b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 930.994506][T29247] IPVS: set_ctl: invalid protocol: 0 172.20.20.126:0 13:24:51 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001840)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) [ 931.217128][T29256] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 931.225680][T29256] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 931.246559][T29253] loop2: p1 p2 p3 p4 [ 931.251234][T29253] loop2: p1 size 78398975 extends beyond EOD, truncated [ 931.417218][T29253] loop2: p2 size 100663296 extends beyond EOD, truncated [ 931.485050][T29253] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 931.497262][T29262] loop3: p1 p2 p3 p4 [ 931.501307][T29262] loop3: partition table partially beyond EOD, truncated [ 931.511278][T29262] loop3: p1 start 737350 is beyond EOD, truncated [ 931.518267][T29262] loop3: p2 start 25 is beyond EOD, truncated [ 931.524543][T29262] loop3: p3 start 10 is beyond EOD, truncated [ 931.530741][T29262] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:51 executing program 4: mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000001e80)='./file0\x00', 0x0, 0x3, &(0x7f00000025c0)=[{&(0x7f0000001ec0)='E', 0x1}, {0x0}, {0x0}], 0x0, 0x0) [ 931.663283][T29253] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x274, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:51 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xc0201, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) [ 931.794842][T29262] loop3: p1 p2 p3 p4 [ 931.799121][T29262] loop3: partition table partially beyond EOD, truncated [ 931.806882][T29262] loop3: p1 start 737350 is beyond EOD, truncated [ 931.813562][T29262] loop3: p2 start 25 is beyond EOD, truncated [ 931.821827][T29262] loop3: p3 start 10 is beyond EOD, truncated [ 931.828534][T29262] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x10]}) [ 931.978182][T29253] loop2: p1 p2 p3 p4 [ 931.982882][T29253] loop2: p1 size 78398975 extends beyond EOD, truncated [ 932.048390][T29253] loop2: p2 size 100663296 extends beyond EOD, truncated [ 932.091768][T29289] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 932.100677][T29289] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 932.115567][T29253] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 932.196075][T29253] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff91580b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 932.285699][T29296] misc userio: No port type given on /dev/userio 13:24:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x275, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 932.470700][T29297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:24:52 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810b0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:52 executing program 4: syz_mount_image$vfat(&(0x7f00000043c0)='vfat\x00', &(0x7f0000004400)='./file0\x00', 0x0, 0x0, &(0x7f00000046c0), 0x0, &(0x7f0000004740)) 13:24:52 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2c800, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x42800, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000400)=@framed={{}, [@call]}, &(0x7f0000000440)='GPL\x00', 0x5, 0x85, &(0x7f0000000480)=""/133, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, 0x0}, 0x78) [ 932.846213][T29310] loop3: p1 p2 p3 p4 [ 932.850475][T29310] loop3: partition table partially beyond EOD, truncated [ 932.858652][T29310] loop3: p1 start 743569 is beyond EOD, truncated [ 932.865287][T29310] loop3: p2 start 25 is beyond EOD, truncated [ 932.871426][T29310] loop3: p3 start 10 is beyond EOD, truncated [ 932.877680][T29310] loop3: p4 start 3976200192 is beyond EOD, truncated [ 932.902838][T29318] FAT-fs (loop4): bogus number of reserved sectors [ 932.903669][T29315] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 932.909804][T29318] FAT-fs (loop4): Can't find a valid FAT filesystem [ 932.917644][T29315] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x11]}) [ 932.987365][T29318] FAT-fs (loop4): bogus number of reserved sectors [ 932.994432][T29318] FAT-fs (loop4): Can't find a valid FAT filesystem 13:24:52 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) bind$l2tp6(r0, 0x0, 0x0) 13:24:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x276, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 933.319277][T29328] loop2: p1 p2 p3 p4 [ 933.324210][T29328] loop2: p1 size 78398975 extends beyond EOD, truncated [ 933.345869][T29329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 933.368335][T29328] loop2: p2 size 100663296 extends beyond EOD, truncated [ 933.410527][T29328] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 933.422036][T29328] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:53 executing program 4: mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000025c0)=[{&(0x7f0000001ec0)='E', 0x1}], 0x0, 0x0) 13:24:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffffe0f505ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 933.616120][T29328] loop2: p1 p2 p3 p4 [ 933.621357][T29328] loop2: p1 size 78398975 extends beyond EOD, truncated 13:24:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 13:24:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x12]}) [ 933.682177][T29328] loop2: p2 size 100663296 extends beyond EOD, truncated [ 933.801031][T29328] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 933.857695][T29328] loop2: p4 start 3976200192 is beyond EOD, truncated [ 933.945373][T29355] loop3: p1 p2 p3 p4 [ 933.949789][T29355] loop3: partition table partially beyond EOD, truncated [ 933.958224][T29355] loop3: p1 start 99999999 is beyond EOD, truncated [ 933.967447][T29355] loop3: p2 start 25 is beyond EOD, truncated [ 933.970957][T29357] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 933.974058][T29355] loop3: p3 start 10 is beyond EOD, truncated [ 933.974107][T29355] loop3: p4 start 3976200192 is beyond EOD, truncated [ 933.995880][T29357] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 934.110576][T29364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 934.142463][T29355] loop3: p1 p2 p3 p4 [ 934.147063][T29355] loop3: partition table partially beyond EOD, truncated [ 934.155101][T29355] loop3: p1 start 99999999 is beyond EOD, truncated [ 934.161779][T29355] loop3: p2 start 25 is beyond EOD, truncated [ 934.168088][T29355] loop3: p3 start 10 is beyond EOD, truncated [ 934.176409][T29355] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:54 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001c80)) 13:24:54 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 13:24:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x25]}) 13:24:54 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810c0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x277, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff000000edff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 935.076131][T29390] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:24:55 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 935.255025][T29399] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 935.263322][T29399] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:55 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38) getitimer(0x2, &(0x7f0000000340)) [ 935.316536][T29400] loop3: p1 p2 p3 p4 [ 935.320606][T29400] loop3: partition table partially beyond EOD, truncated [ 935.328443][T29400] loop3: p1 start 3976200192 is beyond EOD, truncated [ 935.335425][T29400] loop3: p2 start 25 is beyond EOD, truncated [ 935.341563][T29400] loop3: p3 start 10 is beyond EOD, truncated [ 935.347845][T29400] loop3: p4 start 3976200192 is beyond EOD, truncated [ 935.416633][T29398] loop2: p1 p2 p3 p4 [ 935.421229][T29398] loop2: p1 size 78398975 extends beyond EOD, truncated [ 935.454669][T29398] loop2: p2 size 100663296 extends beyond EOD, truncated [ 935.492737][T29398] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 935.532313][T29398] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x5c]}) [ 935.768203][T29398] loop2: p1 p2 p3 p4 [ 935.772842][T29398] loop2: p1 size 78398975 extends beyond EOD, truncated [ 935.799318][T29398] loop2: p2 size 100663296 extends beyond EOD, truncated [ 935.834151][T29398] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 935.857735][T29398] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x278, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:55 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 13:24:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a020000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:24:56 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810d0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 936.464293][T29427] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 936.472611][T29427] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:56 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz1\x00', 0x200002, 0x0) 13:24:56 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810e0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:24:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x279, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:56 executing program 4: syz_mount_image$minix(&(0x7f0000000480)='minix\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x4008, &(0x7f0000000680)) [ 937.014156][T29438] loop3: p1 p2 p3 p4 [ 937.018317][T29438] loop3: partition table partially beyond EOD, truncated [ 937.026161][T29438] loop3: p1 start 522 is beyond EOD, truncated [ 937.032389][T29438] loop3: p2 start 25 is beyond EOD, truncated [ 937.040781][T29438] loop3: p3 start 10 is beyond EOD, truncated [ 937.047492][T29438] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x9, &(0x7f0000000440)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0xb}, @call={0x85, 0x0, 0x0, 0x70}, @call={0x85, 0x0, 0x0, 0x72}, @generic={0x1, 0xb, 0x3, 0xffff, 0x101}, @alu={0x0, 0x0, 0x0, 0x7, 0xb, 0x50, 0xffffffffffffffff}, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:24:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x90]}) [ 937.271669][T29447] loop2: p1 p2 p3 p4 [ 937.276552][T29447] loop2: p1 size 78398975 extends beyond EOD, truncated [ 937.326144][T29454] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 937.340427][T29447] loop2: p2 size 100663296 extends beyond EOD, truncated [ 937.354222][T29447] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 937.366717][T29447] loop2: p4 start 3976200192 is beyond EOD, truncated [ 937.417702][T29460] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 937.426311][T29460] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 937.457963][T29454] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 13:24:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:57 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) [ 937.740150][T29447] loop2: p1 p2 p3 p4 [ 937.743177][T29472] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 937.744999][T29447] loop2: p1 size 78398975 extends beyond EOD, truncated 13:24:57 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) syz_io_uring_setup(0x4b0f, &(0x7f0000001b00)={0x0, 0xf5c3, 0x9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) [ 937.821824][T29447] loop2: p2 size 100663296 extends beyond EOD, truncated [ 937.845882][T29447] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 937.862836][T29447] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a030000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:24:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x300]}) 13:24:57 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810f0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 938.169885][T29491] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 938.178368][T29491] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.329140][T29497] loop3: p1 p2 p3 p4 [ 938.333293][T29497] loop3: partition table partially beyond EOD, truncated [ 938.341177][T29497] loop3: p1 start 778 is beyond EOD, truncated [ 938.347630][T29497] loop3: p2 start 25 is beyond EOD, truncated [ 938.353931][T29497] loop3: p3 start 10 is beyond EOD, truncated [ 938.360093][T29497] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:58 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x40200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xb0000001}) [ 938.517962][T29506] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:24:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') read$FUSE(r0, &(0x7f00000044c0)={0x2020}, 0x2020) [ 938.743138][T29497] loop3: p1 p2 p3 p4 [ 938.747577][T29497] loop3: partition table partially beyond EOD, truncated [ 938.755772][T29497] loop3: p1 start 778 is beyond EOD, truncated [ 938.762994][T29497] loop3: p2 start 25 is beyond EOD, truncated [ 938.769839][T29497] loop3: p3 start 10 is beyond EOD, truncated [ 938.776130][T29497] loop3: p4 start 3976200192 is beyond EOD, truncated [ 938.846601][T29512] loop2: p1 p2 p3 p4 [ 938.851573][T29512] loop2: p1 size 78398975 extends beyond EOD, truncated [ 938.870605][T29512] loop2: p2 size 100663296 extends beyond EOD, truncated [ 938.894147][T29512] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:24:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a040000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:24:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x500]}) [ 938.970039][T29529] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 938.978529][T29529] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.996590][T29512] loop2: p4 start 3976200192 is beyond EOD, truncated 13:24:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:24:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001580)='batadv\x00') 13:24:59 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001c00)) [ 939.383894][T29512] loop2: p1 p2 p3 p4 [ 939.388453][T29512] loop2: p1 size 78398975 extends beyond EOD, truncated [ 939.493933][T29512] loop2: p2 size 100663296 extends beyond EOD, truncated [ 939.527730][T29546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 939.552310][T29512] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 939.582753][T29542] loop3: p1 p2 p3 p4 [ 939.587193][T29542] loop3: partition table partially beyond EOD, truncated 13:24:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x600]}) [ 939.595048][T29542] loop3: p1 start 1034 is beyond EOD, truncated [ 939.602878][T29542] loop3: p2 start 25 is beyond EOD, truncated [ 939.609534][T29542] loop3: p3 start 10 is beyond EOD, truncated [ 939.615826][T29542] loop3: p4 start 3976200192 is beyond EOD, truncated [ 939.678290][T29512] loop2: p4 start 3976200192 is beyond EOD, truncated [ 939.810105][T29562] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 939.818608][T29562] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:24:59 executing program 4: pselect6(0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={[0x2]}, 0x8}) 13:24:59 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181100fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 939.907685][T29542] loop3: p1 p2 p3 p4 [ 939.911828][T29542] loop3: partition table partially beyond EOD, truncated [ 939.919724][T29542] loop3: p1 start 1034 is beyond EOD, truncated [ 939.926173][T29542] loop3: p2 start 25 is beyond EOD, truncated [ 939.932331][T29542] loop3: p3 start 10 is beyond EOD, truncated [ 939.938666][T29542] loop3: p4 start 3976200192 is beyond EOD, truncated 13:24:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) [ 940.253004][T29574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:00 executing program 4: 13:25:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a050000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 940.578163][T29582] loop2: p1 p2 p3 p4 [ 940.582811][T29582] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x700]}) [ 940.669293][T29582] loop2: p2 size 100663296 extends beyond EOD, truncated [ 940.716095][T29591] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 940.727125][T29591] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 940.741390][T29582] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 940.811923][T29582] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:00 executing program 5: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0xed) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 13:25:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 13:25:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 941.081354][T29601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 941.142707][T29598] loop3: p1 p2 p3 p4 [ 941.147146][T29598] loop3: partition table partially beyond EOD, truncated [ 941.154932][T29598] loop3: p1 start 1290 is beyond EOD, truncated [ 941.161257][T29598] loop3: p2 start 25 is beyond EOD, truncated [ 941.167588][T29598] loop3: p3 start 10 is beyond EOD, truncated [ 941.173848][T29598] loop3: p4 start 3976200192 is beyond EOD, truncated [ 941.220834][T29582] loop2: p1 p2 p3 p4 [ 941.225761][T29582] loop2: p1 size 78398975 extends beyond EOD, truncated [ 941.304015][T29582] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x900]}) [ 941.376932][T29582] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 941.409079][T29615] IPVS: ftp: loaded support on port[0] = 21 [ 941.462589][T29582] loop2: p4 start 3976200192 is beyond EOD, truncated [ 941.477967][T29598] loop3: p1 p2 p3 p4 [ 941.482031][T29598] loop3: partition table partially beyond EOD, truncated [ 941.489838][T29598] loop3: p1 start 1290 is beyond EOD, truncated [ 941.496531][T29598] loop3: p2 start 25 is beyond EOD, truncated [ 941.502670][T29598] loop3: p3 start 10 is beyond EOD, truncated [ 941.508961][T29598] loop3: p4 start 3976200192 is beyond EOD, truncated [ 941.575811][T29649] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 941.584287][T29649] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 941.635832][T29621] IPVS: ftp: loaded support on port[0] = 21 13:25:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x27f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:01 executing program 4: syz_genetlink_get_family_id$batadv(0x0) socket$nl_generic(0x10, 0x3, 0x10) 13:25:01 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181110fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a060000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 942.042338][T29668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:01 executing program 5: syz_io_uring_setup(0x2e37, &(0x7f0000003a00), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) [ 942.093209][ T1145] tipc: TX() has been purged, node left! [ 942.210118][T29685] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 942.218773][T29685] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 13:25:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xa00]}) 13:25:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x280, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 942.618975][T29691] loop2: p1 p2 p3 p4 [ 942.624044][T29691] loop2: p1 size 78398975 extends beyond EOD, truncated [ 942.643226][T29691] loop2: p2 size 100663296 extends beyond EOD, truncated [ 942.652541][T29696] loop3: p1 p2 p3 p4 [ 942.656866][T29696] loop3: partition table partially beyond EOD, truncated [ 942.664518][T29696] loop3: p1 start 1546 is beyond EOD, truncated [ 942.672939][T29696] loop3: p2 start 25 is beyond EOD, truncated [ 942.679675][T29696] loop3: p3 start 10 is beyond EOD, truncated [ 942.685946][T29696] loop3: p4 start 3976200192 is beyond EOD, truncated [ 942.759037][T29691] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 942.812530][T29696] loop3: p1 p2 p3 p4 [ 942.816744][T29696] loop3: partition table partially beyond EOD, truncated [ 942.824538][T29696] loop3: p1 start 1546 is beyond EOD, truncated [ 942.830870][T29696] loop3: p2 start 25 is beyond EOD, truncated [ 942.837152][T29696] loop3: p3 start 10 is beyond EOD, truncated [ 942.843321][T29696] loop3: p4 start 3976200192 is beyond EOD, truncated [ 942.853951][T29691] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:02 executing program 4: 13:25:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a070000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 943.008815][T29691] loop2: p1 p2 p3 p4 [ 943.013665][T29691] loop2: p1 size 78398975 extends beyond EOD, truncated [ 943.096568][T29691] loop2: p2 size 100663296 extends beyond EOD, truncated [ 943.205376][T29691] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:03 executing program 5: [ 943.250494][T29691] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xb00]}) [ 943.404079][T29732] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 943.412336][T29732] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 943.518925][T29733] loop3: p1 p2 p3 p4 [ 943.523112][T29733] loop3: partition table partially beyond EOD, truncated [ 943.530951][T29733] loop3: p1 start 1802 is beyond EOD, truncated [ 943.537545][T29733] loop3: p2 start 25 is beyond EOD, truncated [ 943.543864][T29733] loop3: p3 start 10 is beyond EOD, truncated [ 943.550011][T29733] loop3: p4 start 3976200192 is beyond EOD, truncated [ 943.655252][T29733] loop3: p1 p2 p3 p4 [ 943.659328][T29733] loop3: partition table partially beyond EOD, truncated [ 943.667164][T29733] loop3: p1 start 1802 is beyond EOD, truncated [ 943.674197][T29733] loop3: p2 start 25 is beyond EOD, truncated [ 943.680350][T29733] loop3: p3 start 10 is beyond EOD, truncated [ 943.686854][T29733] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:03 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181120fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x281, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:03 executing program 4: 13:25:03 executing program 5: [ 944.089226][T29747] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 944.219494][T29752] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 944.227970][T29752] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a080000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 944.457225][T29757] loop2: p1 p2 p3 p4 [ 944.461945][T29757] loop2: p1 size 78398975 extends beyond EOD, truncated [ 944.482337][T29757] loop2: p2 size 100663296 extends beyond EOD, truncated [ 944.502903][T29757] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 944.518185][T29757] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xc00]}) 13:25:04 executing program 4: 13:25:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x282, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 944.714981][T29767] loop3: p1 p2 p3 p4 [ 944.720821][T29767] loop3: partition table partially beyond EOD, truncated [ 944.728744][T29767] loop3: p1 start 2058 is beyond EOD, truncated [ 944.735219][T29767] loop3: p2 start 25 is beyond EOD, truncated [ 944.741362][T29767] loop3: p3 start 10 is beyond EOD, truncated [ 944.747766][T29767] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:04 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181130fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:04 executing program 5: [ 944.945516][T29767] loop3: p1 p2 p3 p4 [ 944.949620][T29767] loop3: partition table partially beyond EOD, truncated [ 944.957535][T29767] loop3: p1 start 2058 is beyond EOD, truncated [ 944.964049][T29767] loop3: p2 start 25 is beyond EOD, truncated [ 944.970183][T29767] loop3: p3 start 10 is beyond EOD, truncated [ 944.976466][T29767] loop3: p4 start 3976200192 is beyond EOD, truncated [ 945.076337][T29780] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 945.084752][T29780] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:05 executing program 4: 13:25:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x283, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a090000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 945.744731][T29788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 945.752096][T29794] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 945.770899][T29794] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 945.855036][T29793] loop2: p1 p2 p3 p4 [ 945.859768][T29793] loop2: p1 size 78398975 extends beyond EOD, truncated [ 945.884406][T29793] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:05 executing program 4: [ 945.911839][T29793] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xd00]}) 13:25:05 executing program 5: [ 946.026498][T29799] loop3: p1 p2 p3 p4 [ 946.030740][T29799] loop3: partition table partially beyond EOD, truncated [ 946.038794][T29799] loop3: p1 start 2314 is beyond EOD, truncated [ 946.045412][T29799] loop3: p2 start 25 is beyond EOD, truncated [ 946.051588][T29799] loop3: p3 start 10 is beyond EOD, truncated [ 946.057849][T29799] loop3: p4 start 3976200192 is beyond EOD, truncated [ 946.064474][T29793] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x284, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 946.199044][T29793] loop2: p1 p2 p3 p4 [ 946.203893][T29793] loop2: p1 size 78398975 extends beyond EOD, truncated [ 946.212877][T29793] loop2: p2 size 100663296 extends beyond EOD, truncated [ 946.223218][T29793] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 946.238513][T29793] loop2: p4 start 3976200192 is beyond EOD, truncated [ 946.322313][T29799] loop3: p1 p2 p3 p4 [ 946.326550][T29799] loop3: partition table partially beyond EOD, truncated [ 946.334454][T29799] loop3: p1 start 2314 is beyond EOD, truncated [ 946.340775][T29799] loop3: p2 start 25 is beyond EOD, truncated [ 946.347097][T29799] loop3: p3 start 10 is beyond EOD, truncated [ 946.353238][T29799] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:06 executing program 4: 13:25:06 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181140fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 946.696128][T29823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 946.713389][T29827] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 946.713533][T29827] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:06 executing program 5: 13:25:06 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0a0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x285, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:07 executing program 4: [ 947.136026][T29839] loop2: p1 p2 p3 p4 [ 947.140660][T29839] loop2: p1 size 78398975 extends beyond EOD, truncated [ 947.260519][T29839] loop2: p2 size 100663296 extends beyond EOD, truncated [ 947.282136][T29839] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 947.304067][T29839] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xe00]}) 13:25:07 executing program 4: [ 947.453391][T29855] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 947.461968][T29855] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:07 executing program 5: [ 947.494251][T29848] loop3: p1 p2 p3 p4 [ 947.498432][T29848] loop3: partition table partially beyond EOD, truncated [ 947.506334][T29848] loop3: p1 start 2570 is beyond EOD, truncated [ 947.512697][T29848] loop3: p2 start 25 is beyond EOD, truncated [ 947.519510][T29848] loop3: p3 start 10 is beyond EOD, truncated [ 947.525799][T29848] loop3: p4 start 3976200192 is beyond EOD, truncated [ 947.577968][T29839] loop2: p1 p2 p3 p4 [ 947.582652][T29839] loop2: p1 size 78398975 extends beyond EOD, truncated [ 947.625331][T29839] loop2: p2 size 100663296 extends beyond EOD, truncated [ 947.639569][T29839] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 947.652963][T29839] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x286, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 947.725853][T29848] loop3: p1 p2 p3 p4 [ 947.729998][T29848] loop3: partition table partially beyond EOD, truncated [ 947.737864][T29848] loop3: p1 start 2570 is beyond EOD, truncated [ 947.744316][T29848] loop3: p2 start 25 is beyond EOD, truncated [ 947.750562][T29848] loop3: p3 start 10 is beyond EOD, truncated [ 947.756948][T29848] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:07 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181250fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 947.902098][T29867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 948.009370][T29874] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 948.017896][T29874] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:08 executing program 4: 13:25:08 executing program 5: 13:25:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x287, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x1100]}) [ 948.607615][T29888] loop2: p1 p2 p3 p4 [ 948.614251][T29888] loop2: p1 size 78398975 extends beyond EOD, truncated [ 948.630801][T29888] loop2: p2 size 100663296 extends beyond EOD, truncated [ 948.641064][T29888] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 948.652702][T29888] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:08 executing program 5: [ 948.739169][T29892] loop3: p1 p2 p3 p4 [ 948.743972][T29892] loop3: partition table partially beyond EOD, truncated [ 948.751870][T29892] loop3: p1 start 2826 is beyond EOD, truncated [ 948.758455][T29892] loop3: p2 start 25 is beyond EOD, truncated [ 948.765110][T29892] loop3: p3 start 10 is beyond EOD, truncated [ 948.771444][T29892] loop3: p4 start 3976200192 is beyond EOD, truncated [ 948.791999][T29899] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 948.800508][T29899] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x288, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:08 executing program 4: 13:25:08 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181260fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 949.185280][T29892] loop3: p1 p2 p3 p4 [ 949.189417][T29892] loop3: partition table partially beyond EOD, truncated [ 949.197420][T29892] loop3: p1 start 2826 is beyond EOD, truncated [ 949.203884][T29892] loop3: p2 start 25 is beyond EOD, truncated [ 949.210035][T29892] loop3: p3 start 10 is beyond EOD, truncated [ 949.216356][T29892] loop3: p4 start 3976200192 is beyond EOD, truncated [ 949.417652][T29921] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 949.430752][T29921] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x1200]}) 13:25:09 executing program 5: 13:25:09 executing program 4: 13:25:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0c0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x289, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 949.818981][T29925] loop2: p1 p2 p3 p4 [ 949.823764][T29925] loop2: p1 size 78398975 extends beyond EOD, truncated [ 949.833282][T29925] loop2: p2 size 100663296 extends beyond EOD, truncated [ 949.865090][T29925] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 949.890429][T29925] loop2: p4 start 3976200192 is beyond EOD, truncated [ 950.059956][T29925] loop2: p1 p2 p3 p4 [ 950.064787][T29925] loop2: p1 size 78398975 extends beyond EOD, truncated [ 950.096539][T29925] loop2: p2 size 100663296 extends beyond EOD, truncated [ 950.171791][T29925] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 950.197581][T29925] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:10 executing program 5: [ 950.304350][T29954] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 950.312854][T29954] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:10 executing program 4: [ 950.462742][T29955] loop3: p1 p2 p3 p4 [ 950.467083][T29955] loop3: partition table partially beyond EOD, truncated [ 950.474906][T29955] loop3: p1 start 3082 is beyond EOD, truncated [ 950.481225][T29955] loop3: p2 start 25 is beyond EOD, truncated [ 950.487584][T29955] loop3: p3 start 10 is beyond EOD, truncated [ 950.493813][T29955] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x2500]}) 13:25:10 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201812f0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 950.754541][T29955] loop3: p1 p2 p3 p4 [ 950.760493][T29955] loop3: partition table partially beyond EOD, truncated [ 950.768671][T29955] loop3: p1 start 3082 is beyond EOD, truncated [ 950.775128][T29955] loop3: p2 start 25 is beyond EOD, truncated [ 950.781262][T29955] loop3: p3 start 10 is beyond EOD, truncated [ 950.787602][T29955] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:10 executing program 5: 13:25:10 executing program 4: [ 951.031483][T29971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 951.207234][T29978] loop2: p1 p2 p3 p4 [ 951.211897][T29978] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:11 executing program 5: [ 951.259133][T29982] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 951.267772][T29982] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 951.331049][T29978] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0d0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 951.394265][T29978] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 951.413786][T29978] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:11 executing program 4: 13:25:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x5c00]}) 13:25:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 951.667879][T29978] loop2: p1 p2 p3 p4 [ 951.672519][T29978] loop2: p1 size 78398975 extends beyond EOD, truncated [ 951.764011][T29978] loop2: p2 size 100663296 extends beyond EOD, truncated [ 951.772965][T29978] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 951.801668][T29997] loop3: p1 p2 p3 p4 [ 951.806100][T29997] loop3: partition table partially beyond EOD, truncated [ 951.814005][T29997] loop3: p1 start 3338 is beyond EOD, truncated [ 951.820389][T29997] loop3: p2 start 25 is beyond EOD, truncated [ 951.826708][T29997] loop3: p3 start 10 is beyond EOD, truncated [ 951.832871][T29997] loop3: p4 start 3976200192 is beyond EOD, truncated [ 951.896352][T29978] loop2: p4 start 3976200192 is beyond EOD, truncated [ 951.935497][T29997] loop3: p1 p2 p3 p4 [ 951.939690][T29997] loop3: partition table partially beyond EOD, truncated 13:25:11 executing program 4: 13:25:11 executing program 5: [ 951.947726][T29997] loop3: p1 start 3338 is beyond EOD, truncated [ 951.954376][T29997] loop3: p2 start 25 is beyond EOD, truncated [ 951.960534][T29997] loop3: p3 start 10 is beyond EOD, truncated [ 951.966879][T29997] loop3: p4 start 3976200192 is beyond EOD, truncated [ 952.049180][T30008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0e0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:12 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201813a0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x9000]}) [ 952.415416][T30021] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 952.424656][T30021] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:12 executing program 5: [ 952.618054][T30028] loop3: p1 p2 p3 p4 [ 952.622270][T30028] loop3: partition table partially beyond EOD, truncated [ 952.630178][T30028] loop3: p1 start 3594 is beyond EOD, truncated [ 952.636761][T30028] loop3: p2 start 25 is beyond EOD, truncated [ 952.642916][T30028] loop3: p3 start 10 is beyond EOD, truncated [ 952.649393][T30028] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:12 executing program 4: 13:25:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 952.778539][T30028] loop3: p1 p2 p3 p4 [ 952.782730][T30028] loop3: partition table partially beyond EOD, truncated [ 952.790647][T30028] loop3: p1 start 3594 is beyond EOD, truncated [ 952.797103][T30028] loop3: p2 start 25 is beyond EOD, truncated [ 952.803270][T30028] loop3: p3 start 10 is beyond EOD, truncated [ 952.811059][T30028] loop3: p4 start 3976200192 is beyond EOD, truncated [ 952.996013][T30045] loop2: p1 p2 p3 p4 [ 953.000588][T30045] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:12 executing program 5: [ 953.073794][T30045] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xff00]}) [ 953.165643][T30045] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 953.258721][T30045] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:13 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0f0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:13 executing program 4: [ 953.500101][T30045] loop2: p1 p2 p3 p4 [ 953.504793][T30045] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:13 executing program 5: [ 953.580074][T30045] loop2: p2 size 100663296 extends beyond EOD, truncated [ 953.608112][T30066] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 953.668961][T30045] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 953.692514][T30075] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 953.701263][T30075] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 953.714438][T30045] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x20000]}) 13:25:13 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181420fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:13 executing program 4: [ 954.073907][T30081] loop3: p1 p2 p3 p4 [ 954.078601][T30081] loop3: partition table partially beyond EOD, truncated [ 954.086580][T30081] loop3: p1 start 3850 is beyond EOD, truncated [ 954.095335][T30081] loop3: p2 start 25 is beyond EOD, truncated [ 954.101504][T30081] loop3: p3 start 10 is beyond EOD, truncated [ 954.107951][T30081] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:14 executing program 5: [ 954.281980][T30085] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 954.388111][T30095] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 954.396544][T30095] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 954.498367][T30081] loop3: p1 p2 p3 p4 [ 954.502541][T30081] loop3: partition table partially beyond EOD, truncated [ 954.511015][T30081] loop3: p1 start 3850 is beyond EOD, truncated [ 954.517401][T30081] loop3: p2 start 25 is beyond EOD, truncated [ 954.523829][T30081] loop3: p3 start 10 is beyond EOD, truncated [ 954.532857][T30081] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:14 executing program 5: 13:25:14 executing program 4: 13:25:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x40000]}) 13:25:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x28f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 954.896544][T30104] loop2: p1 p2 p3 p4 [ 954.901259][T30104] loop2: p1 size 78398975 extends beyond EOD, truncated [ 954.917057][T30104] loop2: p2 size 100663296 extends beyond EOD, truncated [ 954.928345][T30104] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 954.943929][T30104] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a100000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:14 executing program 5: [ 955.119816][T30104] loop2: p1 p2 p3 p4 [ 955.124577][T30104] loop2: p1 size 78398975 extends beyond EOD, truncated [ 955.157752][T30104] loop2: p2 size 100663296 extends beyond EOD, truncated [ 955.175393][T30120] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 955.183833][T30120] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 955.219360][T30104] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 955.258742][T30104] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:15 executing program 4: [ 955.409200][T30126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x290, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:15 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181480fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 955.655371][T30133] loop3: p1 p2 p3 p4 [ 955.659545][T30133] loop3: partition table partially beyond EOD, truncated [ 955.667403][T30133] loop3: p1 start 4106 is beyond EOD, truncated [ 955.675993][T30133] loop3: p2 start 25 is beyond EOD, truncated [ 955.682146][T30133] loop3: p3 start 10 is beyond EOD, truncated [ 955.688852][T30133] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:15 executing program 5: [ 955.876816][T30143] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 955.887008][T30143] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x80ffff]}) [ 956.039438][T30133] loop3: p1 p2 p3 p4 [ 956.043911][T30133] loop3: partition table partially beyond EOD, truncated [ 956.051465][T30133] loop3: p1 start 4106 is beyond EOD, truncated [ 956.058138][T30133] loop3: p2 start 25 is beyond EOD, truncated [ 956.064434][T30133] loop3: p3 start 10 is beyond EOD, truncated [ 956.070577][T30133] loop3: p4 start 3976200192 is beyond EOD, truncated [ 956.110441][T30145] loop2: p1 p2 p3 p4 [ 956.115381][T30145] loop2: p1 size 78398975 extends beyond EOD, truncated [ 956.133890][T30145] loop2: p2 size 100663296 extends beyond EOD, truncated [ 956.146211][T30145] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x291, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:16 executing program 4: [ 956.214332][T30145] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:16 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a110000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 956.438402][T30157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 956.468879][T30145] loop2: p1 p2 p3 p4 [ 956.473776][T30145] loop2: p1 size 78398975 extends beyond EOD, truncated [ 956.484562][T30145] loop2: p2 size 100663296 extends beyond EOD, truncated [ 956.509099][T30145] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 956.519084][T30145] loop2: p4 start 3976200192 is beyond EOD, truncated [ 956.663269][T30177] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 956.671699][T30177] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:16 executing program 5: 13:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x1000000]}) 13:25:16 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201814c0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x292, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 956.984548][T30180] loop3: p1 p2 p3 p4 [ 956.988727][T30180] loop3: partition table partially beyond EOD, truncated [ 956.996668][T30180] loop3: p1 start 4362 is beyond EOD, truncated [ 957.002987][T30180] loop3: p2 start 25 is beyond EOD, truncated [ 957.009249][T30180] loop3: p3 start 10 is beyond EOD, truncated [ 957.015467][T30180] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:16 executing program 4: [ 957.207798][T30180] loop3: p1 p2 p3 p4 [ 957.214022][T30180] loop3: partition table partially beyond EOD, truncated [ 957.221579][T30180] loop3: p1 start 4362 is beyond EOD, truncated [ 957.229169][T30180] loop3: p2 start 25 is beyond EOD, truncated [ 957.237402][T30180] loop3: p3 start 10 is beyond EOD, truncated [ 957.243705][T30180] loop3: p4 start 3976200192 is beyond EOD, truncated [ 957.307972][T30193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 957.400628][T30198] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 957.409085][T30198] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 957.610943][T30202] loop2: p1 p2 p3 p4 [ 957.615794][T30202] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x293, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:17 executing program 5: [ 957.710731][T30202] loop2: p2 size 100663296 extends beyond EOD, truncated [ 957.720987][T30202] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 957.746731][T30202] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a120000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x2000000]}) 13:25:17 executing program 4: 13:25:17 executing program 5: [ 958.117581][T30217] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 958.126226][T30217] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:18 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181540fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 958.304877][T30222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 958.425694][T30225] loop3: p1 p2 p3 p4 [ 958.429958][T30225] loop3: partition table partially beyond EOD, truncated [ 958.437746][T30225] loop3: p1 start 4618 is beyond EOD, truncated [ 958.446328][T30225] loop3: p2 start 25 is beyond EOD, truncated [ 958.452473][T30225] loop3: p3 start 10 is beyond EOD, truncated [ 958.459486][T30225] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x3000000]}) 13:25:18 executing program 5: 13:25:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x294, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 958.575127][T30225] loop3: p1 p2 p3 p4 [ 958.579213][T30225] loop3: partition table partially beyond EOD, truncated [ 958.587204][T30225] loop3: p1 start 4618 is beyond EOD, truncated [ 958.593965][T30225] loop3: p2 start 25 is beyond EOD, truncated [ 958.600212][T30225] loop3: p3 start 10 is beyond EOD, truncated [ 958.606605][T30225] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:18 executing program 4: 13:25:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a250000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 958.860074][T30237] loop2: p1 p2 p3 p4 [ 958.864889][T30237] loop2: p1 size 78398975 extends beyond EOD, truncated [ 958.895658][T30237] loop2: p2 size 100663296 extends beyond EOD, truncated [ 958.981924][T30247] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 958.982322][T30237] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 958.990527][T30247] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 958.999746][T30243] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:18 executing program 5: [ 959.177218][T30237] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x295, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 959.404597][T30256] loop3: p1 p2 p3 p4 [ 959.408816][T30256] loop3: partition table partially beyond EOD, truncated [ 959.416677][T30256] loop3: p1 start 9482 is beyond EOD, truncated [ 959.423002][T30256] loop3: p2 start 25 is beyond EOD, truncated [ 959.429378][T30256] loop3: p3 start 10 is beyond EOD, truncated [ 959.435678][T30256] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:19 executing program 4: [ 959.544077][T30267] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 959.552404][T30267] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x4000000]}) [ 959.720850][T30256] loop3: p1 p2 p3 p4 [ 959.725241][T30256] loop3: partition table partially beyond EOD, truncated [ 959.732782][T30256] loop3: p1 start 9482 is beyond EOD, truncated [ 959.739284][T30256] loop3: p2 start 25 is beyond EOD, truncated [ 959.745552][T30256] loop3: p3 start 10 is beyond EOD, truncated [ 959.751723][T30256] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:19 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181550fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:19 executing program 5: 13:25:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x296, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:19 executing program 4: 13:25:19 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a2f0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 960.168677][T30275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 960.231267][T30277] loop2: p1 p2 p3 p4 [ 960.236066][T30277] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:20 executing program 5: [ 960.296290][T30284] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 960.304963][T30284] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 960.326204][T30277] loop2: p2 size 100663296 extends beyond EOD, truncated [ 960.360880][T30277] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 960.407084][T30277] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x297, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 960.618385][T30277] loop2: p1 p2 p3 p4 [ 960.623087][T30277] loop2: p1 size 78398975 extends beyond EOD, truncated [ 960.639661][T30277] loop2: p2 size 100663296 extends beyond EOD, truncated [ 960.651136][T30277] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 960.665066][T30277] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:20 executing program 4: 13:25:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x5000000]}) 13:25:20 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201815c0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:20 executing program 5: [ 960.884757][T30306] loop3: p1 p2 p3 p4 [ 960.888823][T30306] loop3: partition table partially beyond EOD, truncated [ 960.898739][T30306] loop3: p1 start 12042 is beyond EOD, truncated [ 960.905567][T30306] loop3: p2 start 25 is beyond EOD, truncated [ 960.911738][T30306] loop3: p3 start 10 is beyond EOD, truncated [ 960.918050][T30306] loop3: p4 start 3976200192 is beyond EOD, truncated [ 961.197169][T30306] loop3: p1 p2 p3 p4 [ 961.201244][T30306] loop3: partition table partially beyond EOD, truncated [ 961.201649][T30321] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 961.211709][T30306] loop3: p1 start 12042 is beyond EOD, truncated [ 961.219304][T30321] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.235311][T30306] loop3: p2 start 25 is beyond EOD, truncated [ 961.241453][T30306] loop3: p3 start 10 is beyond EOD, truncated [ 961.247703][T30306] loop3: p4 start 3976200192 is beyond EOD, truncated [ 961.336993][T30324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 961.377334][T30321] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 961.386059][T30321] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.430702][T30326] loop2: p1 p2 p3 p4 [ 961.435425][T30326] loop2: p1 size 78398975 extends beyond EOD, truncated [ 961.498053][T30326] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:21 executing program 4: 13:25:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a420000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 961.595733][T30326] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:21 executing program 5: [ 961.680614][T30326] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x6000000]}) 13:25:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x298, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 961.971985][T30326] loop2: p1 p2 p3 p4 [ 961.976897][T30326] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:21 executing program 4: [ 962.103793][T30326] loop2: p2 size 100663296 extends beyond EOD, truncated [ 962.156623][T30346] loop3: p1 p2 p3 p4 [ 962.160688][T30346] loop3: partition table partially beyond EOD, truncated [ 962.168528][T30346] loop3: p1 start 16906 is beyond EOD, truncated [ 962.175284][T30346] loop3: p2 start 25 is beyond EOD, truncated [ 962.181430][T30346] loop3: p3 start 10 is beyond EOD, truncated [ 962.187839][T30346] loop3: p4 start 3976200192 is beyond EOD, truncated [ 962.226787][T30326] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 962.314348][T30326] loop2: p4 start 3976200192 is beyond EOD, truncated [ 962.392548][T30357] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 962.401421][T30357] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 962.467044][T30346] loop3: p1 p2 p3 p4 [ 962.471105][T30346] loop3: partition table partially beyond EOD, truncated [ 962.478855][T30346] loop3: p1 start 16906 is beyond EOD, truncated [ 962.485396][T30346] loop3: p2 start 25 is beyond EOD, truncated [ 962.491611][T30346] loop3: p3 start 10 is beyond EOD, truncated [ 962.497962][T30346] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:22 executing program 5: 13:25:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x299, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:22 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181600fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x7000000]}) 13:25:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a480000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:22 executing program 4: 13:25:22 executing program 5: [ 963.135472][T30379] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 963.144049][T30379] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 963.286159][T30382] loop2: p1 p2 p3 p4 [ 963.290838][T30382] loop2: p1 size 78398975 extends beyond EOD, truncated [ 963.415707][T30388] loop3: p1 p2 p3 p4 [ 963.419879][T30388] loop3: partition table partially beyond EOD, truncated [ 963.427690][T30388] loop3: p1 start 18442 is beyond EOD, truncated [ 963.434492][T30388] loop3: p2 start 25 is beyond EOD, truncated [ 963.440638][T30388] loop3: p3 start 10 is beyond EOD, truncated [ 963.446902][T30388] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:23 executing program 4: [ 963.474437][T30382] loop2: p2 size 100663296 extends beyond EOD, truncated [ 963.554396][T30382] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 963.580538][T30388] loop3: p1 p2 p3 p4 [ 963.585027][T30388] loop3: partition table partially beyond EOD, truncated [ 963.592947][T30388] loop3: p1 start 18442 is beyond EOD, truncated 13:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x8000000]}) [ 963.600076][T30388] loop3: p2 start 25 is beyond EOD, truncated [ 963.606664][T30388] loop3: p3 start 10 is beyond EOD, truncated [ 963.613303][T30388] loop3: p4 start 3976200192 is beyond EOD, truncated [ 963.634216][T30382] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4c0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 963.821561][T30382] loop2: p1 p2 p3 p4 [ 963.826215][T30382] loop2: p1 size 78398975 extends beyond EOD, truncated [ 963.835235][T30382] loop2: p2 size 100663296 extends beyond EOD, truncated [ 963.846796][T30382] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 963.856852][T30382] loop2: p4 start 3976200192 is beyond EOD, truncated [ 963.909232][T30412] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 963.917525][T30412] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:23 executing program 5: 13:25:24 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181630fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x9000000]}) [ 964.456188][T30421] loop3: p1 p2 p3 p4 [ 964.460357][T30421] loop3: partition table partially beyond EOD, truncated [ 964.468208][T30421] loop3: p1 start 19466 is beyond EOD, truncated [ 964.474950][T30421] loop3: p2 start 25 is beyond EOD, truncated [ 964.482852][T30421] loop3: p3 start 10 is beyond EOD, truncated [ 964.489610][T30421] loop3: p4 start 3976200192 is beyond EOD, truncated [ 964.554198][T30426] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 964.562542][T30426] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:24 executing program 5: 13:25:24 executing program 4: [ 964.605540][T30421] loop3: p1 p2 p3 p4 [ 964.609728][T30421] loop3: partition table partially beyond EOD, truncated [ 964.617544][T30421] loop3: p1 start 19466 is beyond EOD, truncated [ 964.624121][T30421] loop3: p2 start 25 is beyond EOD, truncated [ 964.630262][T30421] loop3: p3 start 10 is beyond EOD, truncated [ 964.636547][T30421] loop3: p4 start 3976200192 is beyond EOD, truncated [ 964.929268][T30437] loop2: p1 p2 p3 p4 [ 964.934234][T30437] loop2: p1 size 78398975 extends beyond EOD, truncated [ 964.952399][T30437] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:24 executing program 5: [ 965.049994][T30443] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 965.089806][T30437] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 965.136428][T30437] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a540000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25410000000c0099007f0000001200000008002700030000000800270000000c0008002600000000000500192107000000080027000300000008002201"], 0x50}}, 0x0) 13:25:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xa000000]}) [ 965.471539][T30437] loop2: p1 p2 p3 p4 [ 965.476289][T30437] loop2: p1 size 78398975 extends beyond EOD, truncated [ 965.503030][T30459] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 965.513178][T30459] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 965.561733][T30437] loop2: p2 size 100663296 extends beyond EOD, truncated [ 965.572418][T30437] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 965.589172][T30437] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x5450, 0x0) socket(0x23, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x70bd28, 0x0, "e8"}, 0x14}}, 0x0) 13:25:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181680fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 965.884135][T30467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 966.007184][T30475] loop3: p1 p2 p3 p4 [ 966.011244][T30475] loop3: partition table partially beyond EOD, truncated [ 966.020953][T30475] loop3: p1 start 21514 is beyond EOD, truncated [ 966.027830][T30475] loop3: p2 start 25 is beyond EOD, truncated [ 966.034076][T30475] loop3: p3 start 10 is beyond EOD, truncated [ 966.040246][T30475] loop3: p4 start 3976200192 is beyond EOD, truncated [ 966.062588][ T31] audit: type=1107 audit(1604582725.870:10): pid=30477 uid=0 auid=0 ses=4 subj==unconfined msg='è' 13:25:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xb000000]}) [ 966.122188][ T31] audit: type=1107 audit(1604582725.930:11): pid=30477 uid=0 auid=0 ses=4 subj==unconfined msg='è' 13:25:26 executing program 4: socketpair(0x2c, 0x803, 0x0, &(0x7f0000000380)) 13:25:26 executing program 5: pselect6(0x40, &(0x7f00000003c0)={0x3}, 0x0, &(0x7f0000000440)={0x5}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0xa3]}, 0x8}) [ 966.386213][T30475] loop3: p1 p2 p3 p4 [ 966.390299][T30475] loop3: partition table partially beyond EOD, truncated [ 966.398058][T30475] loop3: p1 start 21514 is beyond EOD, truncated [ 966.404583][T30475] loop3: p2 start 25 is beyond EOD, truncated [ 966.410812][T30475] loop3: p3 start 10 is beyond EOD, truncated [ 966.417072][T30475] loop3: p4 start 3976200192 is beyond EOD, truncated [ 966.421463][T30495] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 966.434716][T30495] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 966.618066][T30503] loop2: p1 p2 p3 p4 [ 966.622942][T30503] loop2: p1 size 78398975 extends beyond EOD, truncated [ 966.704360][T30503] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000300)) [ 966.764576][T30503] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 966.817818][T30503] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xc000000]}) [ 966.977611][T30517] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 966.986643][T30517] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a550000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'batadv_slave_0\x00'}) 13:25:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x29f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 967.138018][T30503] loop2: p1 p2 p3 p4 [ 967.145079][T30503] loop2: p1 size 78398975 extends beyond EOD, truncated [ 967.168136][T30503] loop2: p2 size 100663296 extends beyond EOD, truncated [ 967.244828][T30503] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:27 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x2a02) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) [ 967.334325][T30503] loop2: p4 start 3976200192 is beyond EOD, truncated [ 967.433356][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.444209][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.456459][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.467520][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.477532][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.488076][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.498105][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.508663][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.518666][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.529350][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.539332][T30533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 967.549904][T30533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.605504][T30537] loop3: p1 p2 p3 p4 [ 967.609589][T30537] loop3: partition table partially beyond EOD, truncated [ 967.617546][T30537] loop3: p1 start 21770 is beyond EOD, truncated [ 967.624329][T30537] loop3: p2 start 25 is beyond EOD, truncated [ 967.630466][T30537] loop3: p3 start 10 is beyond EOD, truncated [ 967.636783][T30537] loop3: p4 start 3976200192 is beyond EOD, truncated [ 967.689393][T30545] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 967.697931][T30545] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:27 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201816c0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xd000000]}) 13:25:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 968.056570][T30537] loop3: p1 p2 p3 p4 [ 968.060720][T30537] loop3: partition table partially beyond EOD, truncated [ 968.070073][T30537] loop3: p1 start 21770 is beyond EOD, truncated [ 968.077205][T30537] loop3: p2 start 25 is beyond EOD, truncated [ 968.083355][T30537] loop3: p3 start 10 is beyond EOD, truncated [ 968.089703][T30537] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x50}}, 0x0) [ 968.241915][T30558] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 968.250702][T30558] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.433354][T30562] loop2: p1 p2 p3 p4 [ 968.438182][T30562] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 968.537882][T30562] loop2: p2 size 100663296 extends beyond EOD, truncated [ 968.595175][T30562] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:28 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a5c0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 968.640781][T30562] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:28 executing program 4: perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:25:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xe000000]}) 13:25:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 968.918758][T30562] loop2: p1 p2 p3 p4 [ 968.923306][T30562] loop2: p1 size 78398975 extends beyond EOD, truncated [ 969.004395][T30562] loop2: p2 size 100663296 extends beyond EOD, truncated [ 969.030881][T30589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 969.052519][T30562] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 969.070404][T30562] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x10000000]}) 13:25:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181740fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 969.337266][T30602] loop3: p1 p2 p3 p4 [ 969.341396][T30602] loop3: partition table partially beyond EOD, truncated [ 969.349252][T30602] loop3: p1 start 23562 is beyond EOD, truncated [ 969.356338][T30602] loop3: p2 start 25 is beyond EOD, truncated [ 969.362484][T30602] loop3: p3 start 10 is beyond EOD, truncated [ 969.368886][T30602] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/147, &(0x7f0000000100)=0x93) [ 969.635481][T30602] loop3: p1 p2 p3 p4 [ 969.639555][T30602] loop3: partition table partially beyond EOD, truncated [ 969.647400][T30602] loop3: p1 start 23562 is beyond EOD, truncated [ 969.654038][T30602] loop3: p2 start 25 is beyond EOD, truncated [ 969.660192][T30602] loop3: p3 start 10 is beyond EOD, truncated [ 969.666458][T30602] loop3: p4 start 3976200192 is beyond EOD, truncated [ 969.773718][T30617] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 969.781971][T30617] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a600000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 969.947510][T30624] IPVS: length: 147 != 8 [ 970.060825][T30625] loop2: p1 p2 p3 p4 [ 970.065667][T30625] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x11000000]}) [ 970.196976][T30625] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 970.247281][T30625] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 970.283847][T30625] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 970.466299][T30625] loop2: p1 p2 p3 p4 [ 970.470819][T30625] loop2: p1 size 78398975 extends beyond EOD, truncated [ 970.532579][T30625] loop2: p2 size 100663296 extends beyond EOD, truncated [ 970.543354][T30625] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 970.561162][T30643] loop3: p1 p2 p3 p4 [ 970.565462][T30643] loop3: partition table partially beyond EOD, truncated [ 970.573091][T30643] loop3: p1 start 24586 is beyond EOD, truncated [ 970.580104][T30643] loop3: p2 start 25 is beyond EOD, truncated [ 970.586417][T30643] loop3: p3 start 10 is beyond EOD, truncated [ 970.592573][T30643] loop3: p4 start 3976200192 is beyond EOD, truncated [ 970.619690][T30625] loop2: p4 start 3976200192 is beyond EOD, truncated [ 970.781172][T30662] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 970.789625][T30662] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 970.806335][T30643] loop3: p1 p2 p3 p4 [ 970.810480][T30643] loop3: partition table partially beyond EOD, truncated [ 970.818427][T30643] loop3: p1 start 24586 is beyond EOD, truncated [ 970.825775][T30643] loop3: p2 start 25 is beyond EOD, truncated [ 970.832034][T30643] loop3: p3 start 10 is beyond EOD, truncated [ 970.838345][T30643] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:30 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201817a0fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:30 executing program 4: ioperm(0x0, 0x1, 0x3) 13:25:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a630000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x12000000]}) 13:25:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8932, &(0x7f0000000100)={'ip6_vti0\x00'}) 13:25:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 971.421006][T30678] loop2: p1 p2 p3 p4 [ 971.425781][T30678] loop2: p1 size 78398975 extends beyond EOD, truncated [ 971.461750][T30678] loop2: p2 size 100663296 extends beyond EOD, truncated [ 971.500273][T30678] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 971.509478][T30682] loop3: p1 p2 p3 p4 [ 971.513706][T30682] loop3: partition table partially beyond EOD, truncated [ 971.521290][T30682] loop3: p1 start 25354 is beyond EOD, truncated [ 971.528002][T30682] loop3: p2 start 25 is beyond EOD, truncated [ 971.534236][T30682] loop3: p3 start 10 is beyond EOD, truncated [ 971.540376][T30682] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:31 executing program 4: clone3(&(0x7f00000001c0)={0x2c108600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 971.619036][T30678] loop2: p4 start 3976200192 is beyond EOD, truncated [ 971.634095][T30694] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 971.642445][T30694] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 13:25:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x25000000]}) 13:25:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 971.961397][T30678] loop2: p1 p2 p3 p4 [ 971.966215][T30678] loop2: p1 size 78398975 extends beyond EOD, truncated [ 972.037295][T30678] loop2: p2 size 100663296 extends beyond EOD, truncated [ 972.149450][T30678] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a680000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 972.228248][T30678] loop2: p4 start 3976200192 is beyond EOD, truncated [ 972.632377][T30720] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 972.640947][T30720] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:32 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, &(0x7f0000000100)={'ip6_vti0\x00'}) [ 972.865652][T30720] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 972.874114][T30720] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:32 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181c00fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 972.929930][T30729] loop3: p1 p2 p3 p4 [ 972.934117][T30729] loop3: partition table partially beyond EOD, truncated [ 972.941725][T30729] loop3: p1 start 26634 is beyond EOD, truncated [ 972.948414][T30729] loop3: p2 start 25 is beyond EOD, truncated [ 972.954677][T30729] loop3: p3 start 10 is beyond EOD, truncated [ 972.960821][T30729] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x5c000000]}) 13:25:33 executing program 4: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000003c0), 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 13:25:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 973.742724][T30753] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 973.751480][T30753] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 973.764484][T30752] loop2: p1 p2 p3 p4 [ 973.771424][T30752] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0x90000000]}) 13:25:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a6c0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 973.843117][T30753] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 973.851498][T30753] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 973.919883][T30752] loop2: p2 size 100663296 extends beyond EOD, truncated [ 973.939693][T30752] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 973.951984][T30752] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:33 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0xa06, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 13:25:33 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 974.126030][T30752] loop2: p1 p2 p3 p4 [ 974.130653][T30752] loop2: p1 size 78398975 extends beyond EOD, truncated [ 974.162366][T30752] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 974.194171][T30752] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 974.269571][T30752] loop2: p4 start 3976200192 is beyond EOD, truncated [ 974.371939][T30771] loop3: p1 p2 p3 p4 [ 974.376200][T30771] loop3: partition table partially beyond EOD, truncated [ 974.383953][T30771] loop3: p1 start 27658 is beyond EOD, truncated [ 974.390443][T30771] loop3: p2 start 25 is beyond EOD, truncated [ 974.396770][T30771] loop3: p3 start 10 is beyond EOD, truncated [ 974.402997][T30771] loop3: p4 start 3976200192 is beyond EOD, truncated [ 974.544562][T30771] loop3: p1 p2 p3 p4 [ 974.548734][T30771] loop3: partition table partially beyond EOD, truncated [ 974.556624][T30771] loop3: p1 start 27658 is beyond EOD, truncated [ 974.563158][T30771] loop3: p2 start 25 is beyond EOD, truncated [ 974.569643][T30771] loop3: p3 start 10 is beyond EOD, truncated [ 974.575950][T30771] loop3: p4 start 3976200192 is beyond EOD, truncated [ 974.672941][T30795] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 974.681342][T30795] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181e60fff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xfdfdffff]}) 13:25:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a740000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:34 executing program 5: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408a0}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x30}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) lsetxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.opaque\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x2) ioctl$sock_ifreq(r1, 0x891e, &(0x7f0000000600)={'bond_slave_1\x00', @ifru_addrs=@tipc=@name}) syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000680)={0x1, "2084bd8363328cfcf6d19cced1c616de1d4e70222b70a2bb6de10bd611d53977", 0x0, 0x1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000006c0)={0x0, 'bridge_slave_1\x00', 0x3}, 0x18) syz_open_dev$vbi(&(0x7f0000000700)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000740)=0x91) keyctl$update(0x2, 0x0, &(0x7f0000000780)="bdadc3a5f06257b3fb3de1b1c9b820bfa090dce09a995accad023ec657f98873bccdd0aacb2b9f63e266f0641090c7d146605458a48b4bd2e2cd7281f73a9c287751e121a449cf0b80c4b0c0459f934ef1677f0d44a1b849eef1b9ee92da2ea38d8f2818eb49b67f10f62834501cff368e52ac760b67e96dcf2d849fa67d421ad34b2583c10baf6153", 0x89) keyctl$read(0xb, 0x0, &(0x7f0000000840)=""/226, 0xe2) r3 = syz_mount_image$ext4(&(0x7f0000000a00)='ext3\x00', &(0x7f0000000a40)='./file0\x00', 0x9, 0x3, &(0x7f0000000c40)=[{&(0x7f0000000a80)="2f9ae5096e6494c18716fd485f6d8279b9d95de56f6088841c7680b9e6d2f9f4d0ec64b5b7b6c971ee958c30c1ac33", 0x2f, 0xba}, {&(0x7f0000000ac0)="672cdf3d20451bd3fe4d5b54efeadc88ac5703e32ab65df59a66a57c168818d5143a04ec53af82f000e1f5bb9801df2f07bae2c78ea428a8a79ef0b51d47ca44331b078f2620eafa35150e56f3147b147b57dda1a66fbc856d7e05c760578b27342cfe2840116080", 0x68, 0x1f}, {&(0x7f0000000b40)="66611a6058402fae7cfae35d76f1070576703e53de0f1e681d04b0af9afb03c3d0fd0a78a353ce97a96b6de3615dd07140a9d13d16193691c6877585f2492590a3ed3cee297041619d32b99042ef0b835db83611c8efbaed459e5eb0024c2a8bb3610df0fb74c58c9b74963c33cdca5353e64de0785bd9be55a44a6b2f5037b62beae340de3c6f599d7d855f30ebce25cd438b989f3d57012f4d0addf3e6980f0c1f565ea5029e3731da574ac087aa5a736de101792780210b0961eaf894eee6ea737ce21917cc339672bfd180426b92408074d9e421", 0xd6, 0xc7}], 0x2200000, &(0x7f0000000cc0)={[{@noblock_validity='noblock_validity'}, {@stripe={'stripe', 0x3d, 0xfffffffffffffffe}}], [{@hash='hash'}, {@obj_type={'obj_type', 0x3d, 'bond_slave_1\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'root'}}, {@appraise='appraise'}, {@audit='audit'}, {@obj_user={'obj_user', 0x3d, '.'}}, {@uid_gt={'uid>', 0xee00}}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001180)={r4, 0x7f, 0x0, [0x6, 0x8, 0x7, 0x84b, 0x3ff], [0x2, 0xffffffff, 0x8001, 0x3ff, 0x200, 0x0, 0x1, 0x4, 0x400000, 0x2, 0x1ff, 0x5, 0x5, 0x8, 0x8, 0x0, 0x2, 0x1, 0x3, 0xe5, 0xfffffffffffffff9, 0x7, 0xd7, 0x1ff, 0x4, 0xb4a, 0x101, 0x2, 0xec, 0x5, 0xff, 0x4, 0x5, 0x1, 0x9, 0x81, 0x1f, 0x7fff, 0x9, 0x2, 0x81, 0x100000001, 0x400, 0x0, 0x5, 0x1, 0x800, 0x7, 0x6, 0x1ff, 0x6, 0x6, 0x3f, 0x400000008000, 0x5, 0x10000, 0x1baf109d, 0x9, 0x8, 0x2, 0xfffffffffffff153, 0x3, 0x450, 0x6406, 0x5, 0x3, 0x0, 0x8, 0x5, 0x7fffffff, 0x0, 0x400, 0x81, 0xfff, 0x4, 0x1, 0x4, 0x4, 0x1, 0x4, 0x4, 0x2, 0x7f, 0xfff, 0x1ff, 0x6, 0x7ff, 0x1f, 0x3, 0x7, 0x1, 0x1, 0x5, 0x6, 0x0, 0x1000, 0x0, 0x7, 0x4, 0xdf8, 0x9, 0x9, 0x6, 0x80000000, 0xed, 0x1, 0x19a, 0x2, 0x2, 0x101, 0x80000001, 0x1, 0x0, 0x81, 0x100, 0x0, 0x100000001, 0x4, 0xba, 0x1, 0x9]}) 13:25:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) 13:25:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 975.231173][T30809] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 975.242198][T30809] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 975.298649][T30807] loop3: p1 p2 p3 p4 [ 975.302958][T30807] loop3: partition table partially beyond EOD, truncated [ 975.311633][T30807] loop3: p1 start 29706 is beyond EOD, truncated [ 975.318221][T30807] loop3: p2 start 25 is beyond EOD, truncated [ 975.324489][T30807] loop3: p3 start 10 is beyond EOD, truncated [ 975.330647][T30807] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 975.461023][T30815] loop2: p1 p2 p3 p4 [ 975.466189][T30815] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:35 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x19000, 0x0) [ 975.514743][T30812] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 975.596892][T30815] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xff000000]}) [ 975.659791][T30815] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 975.697588][T30815] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a7a0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xea5, 0x2a, [@cf={0x4, 0x6, {0x0, 0x6, 0x0, 0x40}}, @fast_bss_trans={0x37, 0xd7, {0x0, 0x8, "79c1dad8ce0c1b344fe6923de9606490", "5186e48ea5d17adb8c82dc16bb5a469f5ddfc1c2ca9944f80d84084178f06b07", "fa93f8747479b67954fc117557109a5e3b48626712a13e799014cf9d5bfb867c", [{0x0, 0x17, "71fd93c77d420d9c3d838f394f56235ebd315e5dcb4e35"}, {0x1, 0x28, "e9a5b5ccde0029648a6851497491a82d74177e4512360a39006b6be3ffb1e42b9ab9805186377206"}, {0x0, 0x4, "c003e39b"}, {0x0, 0x5, "8c6317ea3c"}, {0x0, 0x13, "cd72246f8d94e3b536bbe23b5926df7bc456b0"}, {0x0, 0x12, "e4da87d2ae5c30f6a224e1abb7f4991bc235"}, {0x0, 0x8, "63e8535183b199c0"}, {}]}}, @fast_bss_trans={0x37, 0xc3, {0x0, 0x6, "9dcece0ae46131c4f898639f38510cd1", "4936479f1963573fe9a69973f3e5ad9e23989d88f604502e4179f4e5d75b5522", "2386f28d8a8c84e24624e5ebef3107f8b83b526c0d5af396a7498e4a1f23e7b8", [{0x0, 0x14, "422135983fe53dd03ad100ba5eec4b303c3c696d"}, {0x0, 0x3, "64eeef"}, {0x0, 0x10, "066c2a37bf9aa96564cc1c619be3b204"}, {0x0, 0x15, "19eb80b293ab9dcc99bfef0c76e4c9e75cf160e0b7"}, {0x0, 0x23, "ba3ddb08dce6553bca30d336b23bd940fd91bbcdab1eefdec55821cbbf213bed695ee0"}, {0x0, 0x6, "779c06436e33"}]}}, @ext_channel_switch={0x3c, 0x4}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @mic={0x8c, 0x18, {0x0, "7196d2a20de7", @long="9f33cd087390c0abe2843a18682767a0"}}, @measure_req={0x26, 0xcae, {0x0, 0x0, 0x0, "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"}}]}]}, 0xec4}}, 0x0) [ 975.985821][T30836] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 975.994529][T30836] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 976.069688][T30815] loop2: p1 p2 p3 p4 [ 976.074498][T30815] loop2: p1 size 78398975 extends beyond EOD, truncated [ 976.083924][T30815] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:36 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)='x', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[], 0x2008}, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='k', 0x1}], 0x1}, 0x40000) [ 976.196829][T30815] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 976.227732][T30815] loop2: p4 start 3976200192 is beyond EOD, truncated [ 976.280772][T30847] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:36 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810011ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2aa, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:36 executing program 4: socketpair(0x25, 0x0, 0x0, &(0x7f0000000140)) [ 976.485174][T30854] loop3: p1 p2 p3 p4 [ 976.489244][T30854] loop3: partition table partially beyond EOD, truncated [ 976.497039][T30854] loop3: p1 start 31242 is beyond EOD, truncated [ 976.503743][T30854] loop3: p2 start 25 is beyond EOD, truncated [ 976.509890][T30854] loop3: p3 start 10 is beyond EOD, truncated [ 976.516216][T30854] loop3: p4 start 3976200192 is beyond EOD, truncated [ 976.649085][T30854] loop3: p1 p2 p3 p4 [ 976.653160][T30854] loop3: partition table partially beyond EOD, truncated [ 976.661028][T30854] loop3: p1 start 31242 is beyond EOD, truncated [ 976.669886][T30854] loop3: p2 start 25 is beyond EOD, truncated [ 976.676519][T30854] loop3: p3 start 10 is beyond EOD, truncated [ 976.682697][T30854] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xffff8000]}) 13:25:36 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001680)='/dev/dlm-monitor\x00', 0x4841, 0x0) 13:25:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a900000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 976.972651][T30870] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 976.982747][T30870] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 977.198065][T30876] loop2: p1 p2 p3 p4 [ 977.202710][T30876] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ab, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000000c0)) [ 977.321696][T30876] loop2: p2 size 100663296 extends beyond EOD, truncated [ 977.351962][T30876] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 977.379891][T30876] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a, 0x0, 0x0, 0xfffffdfd]}) [ 977.505416][T30893] loop3: p1 p2 p3 p4 [ 977.509563][T30893] loop3: partition table partially beyond EOD, truncated [ 977.517443][T30893] loop3: p1 start 36874 is beyond EOD, truncated [ 977.523954][T30893] loop3: p2 start 25 is beyond EOD, truncated [ 977.530089][T30893] loop3: p3 start 10 is beyond EOD, truncated [ 977.536535][T30893] loop3: p4 start 3976200192 is beyond EOD, truncated [ 977.666516][T30876] loop2: p1 p2 p3 p4 [ 977.671188][T30876] loop2: p1 size 78398975 extends beyond EOD, truncated [ 977.706648][T30876] loop2: p2 size 100663296 extends beyond EOD, truncated [ 977.729153][T30876] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 977.734925][T30905] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 977.744878][T30905] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a040200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x21) [ 977.761044][T30876] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:37 executing program 4: socket(0x28, 0x0, 0x40) 13:25:37 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810012ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ac, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 978.198812][T30912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 978.296347][T30921] loop3: p1 p2 p3 p4 [ 978.300610][T30921] loop3: partition table partially beyond EOD, truncated [ 978.310495][T30921] loop3: p1 start 132106 is beyond EOD, truncated [ 978.317637][T30921] loop3: p2 start 25 is beyond EOD, truncated [ 978.323871][T30921] loop3: p3 start 10 is beyond EOD, truncated [ 978.330039][T30921] loop3: p4 start 3976200192 is beyond EOD, truncated [ 978.412585][T30929] loop2: p1 p2 p3 p4 [ 978.417555][T30929] loop2: p1 size 78398975 extends beyond EOD, truncated [ 978.452883][T30929] loop2: p2 size 100663296 extends beyond EOD, truncated [ 978.508755][T30929] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 978.553382][T30937] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 978.561834][T30937] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:38 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1000, 0x4) [ 978.597443][T30929] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x8001, 0x0) r6 = dup2(r4, r5) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0086438, &(0x7f0000000080)={0xffffffff}) [ 978.804007][T30921] loop3: p1 p2 p3 p4 [ 978.808076][T30921] loop3: partition table partially beyond EOD, truncated [ 978.815848][T30921] loop3: p1 start 132106 is beyond EOD, truncated [ 978.824494][T30921] loop3: p2 start 25 is beyond EOD, truncated [ 978.830640][T30921] loop3: p3 start 10 is beyond EOD, truncated [ 978.837405][T30921] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:38 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x7248ecc712038f77, 0x0) 13:25:38 executing program 4: ioperm(0x0, 0x7ff, 0xea9) ioperm(0x0, 0x6, 0x1) 13:25:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ad, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:39 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810020ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000300ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 979.292492][T30955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 13:25:39 executing program 4: socketpair(0x1d, 0x0, 0xb43, &(0x7f0000000000)) [ 979.501260][T30963] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 979.509634][T30963] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:39 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 979.747662][T30966] loop2: p1 p2 p3 p4 [ 979.752347][T30966] loop2: p1 size 78398975 extends beyond EOD, truncated [ 979.772421][T30966] loop2: p2 size 100663296 extends beyond EOD, truncated [ 979.782019][T30966] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 979.803189][T30966] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ae, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 979.872846][T30972] loop3: p1 p2 p3 p4 [ 979.877085][T30972] loop3: partition table partially beyond EOD, truncated [ 979.886164][T30972] loop3: p1 start 196618 is beyond EOD, truncated [ 979.892663][T30972] loop3: p2 start 25 is beyond EOD, truncated [ 979.898900][T30972] loop3: p3 start 10 is beyond EOD, truncated [ 979.905099][T30972] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xea5, 0x2a, [@cf={0x4, 0x6, {0x0, 0x6}}, @fast_bss_trans={0x37, 0xd7, {0x0, 0x8, "79c1dad8ce0c1b344fe6923de9606490", "5186e48ea5d17adb8c82dc16bb5a469f5ddfc1c2ca9944f80d84084178f06b07", "fa93f8747479b67954fc117557109a5e3b48626712a13e799014cf9d5bfb867c", [{0x0, 0x17, "71fd93c77d420d9c3d838f394f56235ebd315e5dcb4e35"}, {0x0, 0x28, "e9a5b5ccde0029648a6851497491a82d74177e4512360a39006b6be3ffb1e42b9ab9805186377206"}, {0x0, 0x4, "c003e39b"}, {0x0, 0x5, "8c6317ea3c"}, {0x0, 0x13, "cd72246f8d94e3b536bbe23b5926df7bc456b0"}, {0x0, 0x12, "e4da87d2ae5c30f6a224e1abb7f4991bc235"}, {0x0, 0x8, "63e8535183b199c0"}, {}]}}, @fast_bss_trans={0x37, 0xc3, {0x0, 0x6, "9dcece0ae46131c4f898639f38510cd1", "4936479f1963573fe9a69973f3e5ad9e23989d88f604502e4179f4e5d75b5522", "2386f28d8a8c84e24624e5ebef3107f8b83b526c0d5af396a7498e4a1f23e7b8", [{0x0, 0x14, "422135983fe53dd03ad100ba5eec4b303c3c696d"}, {0x0, 0x3, "64eeef"}, {0x0, 0x10, "066c2a37bf9aa96564cc1c619be3b204"}, {0x0, 0x15, "19eb80b293ab9dcc99bfef0c76e4c9e75cf160e0b7"}, {0x0, 0x23, "ba3ddb08dce6553bca30d336b23bd940fd91bbcdab1eefdec55821cbbf213bed695ee0"}, {0x0, 0x6, "779c06436e33"}]}}, @ext_channel_switch={0x3c, 0x4}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @mic={0x8c, 0x18, {0x0, "7196d2a20de7", @long="9f33cd087390c0abe2843a18682767a0"}}, @measure_req={0x26, 0xcae, {0x0, 0x0, 0x0, "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"}}]}]}, 0xec4}}, 0x0) 13:25:39 executing program 5: pselect6(0x40, &(0x7f00000003c0)={0x3}, &(0x7f0000000400)={0x6}, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0xa3]}, 0x8}) [ 980.174449][T30972] loop3: p1 p2 p3 p4 [ 980.178514][T30972] loop3: partition table partially beyond EOD, truncated [ 980.187879][T30972] loop3: p1 start 196618 is beyond EOD, truncated [ 980.194513][T30972] loop3: p2 start 25 is beyond EOD, truncated [ 980.200687][T30972] loop3: p3 start 10 is beyond EOD, truncated [ 980.206974][T30972] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a020400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 980.358877][T30989] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 980.367563][T30989] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:40 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181005eff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) socket$unix(0x1, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x2000000) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r4) syz_mount_image$adfs(&(0x7f0000000080)='adfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfff, 0x3, &(0x7f0000000100)=[{&(0x7f0000000180)="60560220c7d849ea808dfd2b08e69f37ca53d4c8d65273fb7945db11ffd5fe79b1bfda109e22205c445b6fd6a41f6cded460236171f6d031654b8218d1865d98efe67a6bfccd0cb52e51c48fb6438f1a6d6f960141e44d0b6978c990f29e87cc277657559a694c4b4277f0ff75dc526da709802cde70111844402c357aa4ea5e35c8de", 0x83}, {&(0x7f0000000240)="34ca9562e6ff9033d8b7ae7306de7d6fe7a1267a809110b78bc77b36d91da01758579a9773fec2873efec629f789b2bd99b1f74175ad164983927efb0c03211a1330717e3d442a6ca5159f9a3067b848e8d6741e1da6755281058357ba8591477a105b77a141155b8f56d1cd344afc9fd9ec03df37b1c2", 0x77, 0x1}, {&(0x7f00000002c0)="72a00d29689e347ec484ec7aadd47683cd9f6698665c763d14e905e7eb27c9291f3aad70d3cb0d2d369820062c21c18c0a4405062eeb0d5f3bbad2b5d38294e3643dacb4f94e7049a21dbea9b129cc36b46fa0f07c5c5d44e456c06fc8e50f886d744d29b35af5bbc824b214439570bdff958a0b4ca931b0b53ac4c4602f73c5b6bb7b075ede3acbe59adff9d9f6f91c127c470deb6be92705813f688be2f97b5f221c79d700ae93066721a554dd360005f1e4ab661c12764003ca2789609cf9d72d2a381ae952c2b83588a6b34f0852b8340fd88a18813cfede543ac07185146d9355163fa495ea51a27ba4e01303ab8428b6", 0xf3, 0x183a387b}], 0x2a010, &(0x7f00000003c0)={[{'}[\'*-'}, {')'}, {'/dev/kvm\x00'}], [{@uid_gt={'uid>', r4}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000980)={0x4d2, "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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2af, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:40 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) [ 980.868858][T30998] loop3: p1 p2 p3 p4 [ 980.873028][T30998] loop3: partition table partially beyond EOD, truncated [ 980.880921][T30998] loop3: p1 start 262666 is beyond EOD, truncated [ 980.887679][T30998] loop3: p2 start 25 is beyond EOD, truncated [ 980.894011][T30998] loop3: p3 start 10 is beyond EOD, truncated [ 980.900151][T30998] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:40 executing program 5: socket(0x1e, 0x0, 0x5) [ 981.179402][T31009] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 981.187775][T31009] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 981.213616][T30998] loop3: p1 p2 p3 p4 [ 981.217870][T30998] loop3: partition table partially beyond EOD, truncated [ 981.225672][T30998] loop3: p1 start 262666 is beyond EOD, truncated [ 981.232203][T30998] loop3: p2 start 25 is beyond EOD, truncated [ 981.238463][T30998] loop3: p3 start 10 is beyond EOD, truncated [ 981.244765][T30998] loop3: p4 start 3976200192 is beyond EOD, truncated [ 981.339345][T31008] loop2: p1 p2 p3 p4 [ 981.344158][T31008] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:41 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) [ 981.428989][T31008] loop2: p2 size 100663296 extends beyond EOD, truncated [ 981.474533][T31008] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 981.499212][T31008] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="4d97b5b94f73305f150c7c69a38774fb73dc56e57fd11d3f5edc9bb09f7960b32dddefa29a93c4b43dc1da91ad2b9b87a25604e7c7b6e442d50e32175db29309ef34926638c979537835dea1650ca3f3c0d76f89ac6515b11bb7d2e6488e42684116daca2a3307d825aa7a386ef028fc0ba086ee68857289cf511a75a8f29d71c95cddb2636e4752bcfc58d7473bdc6d9b2571fc07b072d5dc15221c4fda80dc39550cb04446195a37731669e87f83c77fe26ef12053232d634b640b02f477d952dc38c41b41dd90f8ad063665a28178ef638b42d05da225411fc3c9a6cf3534921fba47fcaa738c6fc54f692d18ef5cbeb4194c611dbfc22cfaefc51586cbae") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xe4, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, [], 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45df0dbd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000880}, 0xc0) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a060400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:41 executing program 5: clone3(&(0x7f0000000700)={0x210000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 981.779222][T31008] loop2: p1 p2 p3 p4 [ 981.784109][T31008] loop2: p1 size 78398975 extends beyond EOD, truncated [ 981.865391][T31008] loop2: p2 size 100663296 extends beyond EOD, truncated [ 981.885232][T31008] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 981.902727][T31008] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:41 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) [ 982.077140][T31040] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 982.085559][T31040] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:42 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="02018107a6ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 982.274478][T31044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 982.300754][T31045] loop3: p1 p2 p3 p4 [ 982.305122][T31045] loop3: partition table partially beyond EOD, truncated [ 982.312689][T31045] loop3: p1 start 263690 is beyond EOD, truncated [ 982.319759][T31045] loop3: p2 start 25 is beyond EOD, truncated [ 982.326053][T31045] loop3: p3 start 10 is beyond EOD, truncated [ 982.332201][T31045] loop3: p4 start 3976200192 is beyond EOD, truncated [ 982.505413][T31045] loop3: p1 p2 p3 p4 [ 982.509980][T31045] loop3: partition table partially beyond EOD, truncated [ 982.517730][T31045] loop3: p1 start 263690 is beyond EOD, truncated [ 982.524381][T31045] loop3: p2 start 25 is beyond EOD, truncated [ 982.530521][T31045] loop3: p3 start 10 is beyond EOD, truncated [ 982.536830][T31045] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:42 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8982, 0x0) 13:25:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:42 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 13:25:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 983.122472][T31067] loop2: p1 p2 p3 p4 [ 983.127489][T31067] loop2: p1 size 78398975 extends beyond EOD, truncated [ 983.187780][T31074] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 983.196200][T31074] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 983.254707][T31067] loop2: p2 size 100663296 extends beyond EOD, truncated [ 983.278650][T31079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 983.306443][T31067] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:43 executing program 4: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 983.381490][T31067] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {0x0, 0x0, 0x0}}, 0x48) [ 983.497136][T31086] loop3: p1 p2 p3 p4 [ 983.501206][T31086] loop3: partition table partially beyond EOD, truncated [ 983.509123][T31086] loop3: p1 start 327690 is beyond EOD, truncated [ 983.515825][T31086] loop3: p2 start 25 is beyond EOD, truncated [ 983.521960][T31086] loop3: p3 start 10 is beyond EOD, truncated [ 983.529880][T31086] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000a80)=0xc) syz_mount_image$vxfs(&(0x7f00000000c0)='vxfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000180)="4fca639bed4cd4cda3cd927d534c5dabc12e2a", 0x13, 0x6}, {&(0x7f00000001c0)="bdb6488f28192c08012f119de1c63067aa25af0cae297f701e658a0c4131b695a4a909a42f0c84c35da6097c5514c8535ffccb9de54b2d35bfb6203cf90d45b6434c562aed44e8751706e176be9a03345177ddbd4c0d06c62c3c8bbf129697743db2a8c2500100a7423f51852d4e64ab84bc91c2a588e3d9106c18bc33c906068958cd647141f24657af1cf2436e6a61eae9643b4bddf96d9fb286b79dd4bdc9d8939704b0e7927d1bb66da9d397911db2f6b2e05408262a86d989d5d059387a6747fc4ffebb491ed3f94b683533bd6cff704884bffdf95d4eb4072bac8f8495e833", 0xe2, 0x7972}, {&(0x7f00000002c0)="4bfa1c014dfebec80e17b49a6202c41859d2c28bfdacd527af2ec0fdefbcb386e8413c120ec373e744897be92319db214cf8ef72507af3c04f515ea03ae80e547c3d0393bc7ed441bdce0fd2672619f9b6f90ea3f86bf8c9fb6c901cbcf083988a832657e00e3f29905f3787af97613b2d3e84424053712934bba5d3a0b26d9ec96d6bbc00a7b5ceb359b0b7b9c62f51bfec958cbe14bc2c88b77a41d0b6126d35481ccedc83979e8448a299b8c78b03d754a0866c778acf67b1892e5ff0afe96da224fbec7599afdbc767c69810b21661651cdd41909f7d30705ad45209b3fff788", 0xe2, 0x7}, {&(0x7f00000003c0)="5099ccff3f368c3fb465415c59a1609c3c84c751eab10ab750a806979edfe0fa014933e5b58619", 0x27, 0x1}, {&(0x7f0000000400)="440c7cfed51f9ddb35c553042fc0ba9b867b99b7307533cc7ab094b7604d57baab54e27f0e14654e49e9788095a32f6a2ffe3535ca8c44a5", 0x38, 0x6}, {&(0x7f0000000440)="4937dcab1ae49f0af4ab77", 0xb, 0x100}, {&(0x7f0000000480)="e78e238fd5414fd2124f", 0xa, 0x8000000}, {&(0x7f0000000980)="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", 0xfc, 0x100}], 0x40, &(0x7f0000000b00)={[], [{@subj_type={'subj_type', 0x3d, 'vxfs\x00'}}, {@euid_gt={'euid>', r2}}, {@audit='audit'}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f0000000080)) [ 983.747680][T31086] loop3: p1 p2 p3 p4 [ 983.751866][T31086] loop3: partition table partially beyond EOD, truncated [ 983.759820][T31086] loop3: p1 start 327690 is beyond EOD, truncated [ 983.766896][T31086] loop3: p2 start 25 is beyond EOD, truncated [ 983.773043][T31086] loop3: p3 start 10 is beyond EOD, truncated [ 983.779396][T31086] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:43 executing program 4: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:25:43 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="02018107c8ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:43 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000100)={'ip6_vti0\x00'}) 13:25:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000600ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 984.201141][T31105] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 984.209868][T31105] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 984.328999][T31106] vxfs: WRONG superblock magic 00000000 at 1 13:25:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 984.398186][T31106] vxfs: WRONG superblock magic 00000000 at 8 [ 984.404587][T31106] vxfs: can't find superblock. [ 984.483352][T31118] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 984.491840][T31118] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:44 executing program 4: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:25:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 984.639464][T31120] loop2: p1 p2 p3 p4 [ 984.644178][T31120] loop2: p1 size 78398975 extends beyond EOD, truncated [ 984.678822][T31114] vxfs: WRONG superblock magic 00000000 at 1 [ 984.731250][T31114] vxfs: WRONG superblock magic 00000000 at 8 [ 984.737607][T31114] vxfs: can't find superblock. [ 984.760533][T31120] loop2: p2 size 100663296 extends beyond EOD, truncated [ 984.798137][T31120] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 984.808882][T31120] loop2: p4 start 3976200192 is beyond EOD, truncated [ 984.845121][T31129] loop3: p1 p2 p3 p4 [ 984.849307][T31129] loop3: partition table partially beyond EOD, truncated [ 984.857148][T31129] loop3: p1 start 393226 is beyond EOD, truncated [ 984.865798][T31129] loop3: p2 start 25 is beyond EOD, truncated [ 984.871938][T31129] loop3: p3 start 10 is beyond EOD, truncated [ 984.878654][T31129] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:44 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8904, &(0x7f0000000100)={'ip6_vti0\x00'}) [ 985.066304][T31149] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 985.074565][T31149] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 985.102697][T31120] loop2: p1 p2 p3 p4 [ 985.107467][T31120] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x2d0021, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 985.206768][T31120] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:45 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:25:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a040600ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 985.292881][T31120] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 985.331450][T31120] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:45 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="02018107cdff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:45 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, "e8"}, 0x14}}, 0x0) [ 985.696965][T31160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 985.778312][T31169] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 985.789789][T31169] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:45 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 985.878870][T31166] loop3: p1 p2 p3 p4 [ 985.884826][T31166] loop3: partition table partially beyond EOD, truncated [ 985.892661][T31166] loop3: p1 start 394250 is beyond EOD, truncated [ 985.899364][T31166] loop3: p2 start 25 is beyond EOD, truncated [ 985.905662][T31166] loop3: p3 start 10 is beyond EOD, truncated [ 985.911810][T31166] loop3: p4 start 3976200192 is beyond EOD, truncated [ 985.945927][T31169] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 985.954405][T31169] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 986.125338][T31166] loop3: p1 p2 p3 p4 [ 986.129481][T31166] loop3: partition table partially beyond EOD, truncated [ 986.137381][T31166] loop3: p1 start 394250 is beyond EOD, truncated [ 986.144249][T31166] loop3: p2 start 25 is beyond EOD, truncated [ 986.150395][T31166] loop3: p3 start 10 is beyond EOD, truncated [ 986.156760][T31166] loop3: p4 start 3976200192 is beyond EOD, truncated [ 986.264191][ T31] audit: type=1107 audit(1604582746.050:12): pid=31183 uid=0 auid=0 ses=4 subj==unconfined msg='è' 13:25:46 executing program 5: clone3(0x0, 0x4f) [ 986.308412][T31186] loop2: p1 p2 p3 p4 [ 986.313185][T31186] loop2: p1 size 78398975 extends beyond EOD, truncated [ 986.433442][T31186] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:46 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 986.504135][T31186] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000700ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 986.547935][T31186] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000a40)='/dev/hwrng\x00', 0x200500, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000bc0)=0xe4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@initdev}}, &(0x7f0000000d00)=0xe4) socket$inet_sctp(0x2, 0x1, 0x84) mount$fuseblk(&(0x7f0000000980)='/dev/loop0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='fuseblk\x00', 0x20, &(0x7f0000000ec0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',ro00000S0000040000,user_id=\x00'/42, @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',default_permissions,default_permissions,default_permissions,seclabel,appraise_type=imasig,euid>', @ANYRESDEC=r7, @ANYBLOB="2c636f6e746578743d757365725f752c646566636f6e746578743d73746166665f752c646f6e745f686173682c646566636f6e746578743d726f6f742c7569643e02ffa3356f28fd8decd09cb71da59a639e3edcf8736193e50fb6bf306f4d131be608dbb3ad", @ANYRESDEC=r8, @ANYBLOB=',\x00']) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x0, 0x2a0040) preadv2(r9, &(0x7f0000000540)=[{&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000100)=""/21, 0x15}], 0x6, 0x4, 0x4, 0x12) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 986.636349][T31196] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 986.644898][T31196] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 986.802681][T31186] loop2: p1 p2 p3 p4 [ 986.809432][T31186] loop2: p1 size 78398975 extends beyond EOD, truncated [ 986.935969][T31186] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xea5, 0x2a, [@cf={0x4, 0x6, {0x40, 0x6, 0x3}}, @fast_bss_trans={0x37, 0xd7, {0x0, 0x8, "79c1dad8ce0c1b344fe6923de9606490", "5186e48ea5d17adb8c82dc16bb5a469f5ddfc1c2ca9944f80d84084178f06b07", "fa93f8747479b67954fc117557109a5e3b48626712a13e799014cf9d5bfb867c", [{0x0, 0x17, "71fd93c77d420d9c3d838f394f56235ebd315e5dcb4e35"}, {0x0, 0x28, "e9a5b5ccde0029648a6851497491a82d74177e4512360a39006b6be3ffb1e42b9ab9805186377206"}, {0x0, 0x4, "c003e39b"}, {0x0, 0x5, "8c6317ea3c"}, {0x4, 0x13, "cd72246f8d94e3b536bbe23b5926df7bc456b0"}, {0x0, 0x12, "e4da87d2ae5c30f6a224e1abb7f4991bc235"}, {0x0, 0x8, "63e8535183b199c0"}, {}]}}, @fast_bss_trans={0x37, 0xbe, {0x0, 0x6, "9dcece0ae46131c4f898639f38510cd1", "4936479f1963573fe9a69973f3e5ad9e23989d88f604502e4179f4e5d75b5522", "2386f28d8a8c84e24624e5ebef3107f8b83b526c0d5af396a7498e4a1f23e7b8", [{0x0, 0x14, "422135983fe53dd03ad100ba5eec4b303c3c696d"}, {0x0, 0x3, "64eeef"}, {0x1, 0x10, "066c2a37bf9aa96564cc1c619be3b204"}, {0x0, 0x15, "19eb80b293ab9dcc99bfef0c76e4c9e75cf160e0b7"}, {0x0, 0x23, "ba3ddb08dce6553bca30d336b23bd940fd91bbcdab1eefdec55821cbbf213bed695ee0"}, {0x0, 0x1, 'w'}]}}, @ext_channel_switch={0x3c, 0x4}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @mic={0x8c, 0x18, {0x0, "7196d2a20de7", @long="9f33cd087390c0abe2843a18682767a0"}}, @measure_req={0x26, 0xcb3, {0x0, 0x0, 0x0, "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"}}]}]}, 0xec4}}, 0x0) [ 987.005475][T31186] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 987.092029][T31186] loop2: p4 start 3976200192 is beyond EOD, truncated [ 987.139782][T31212] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:47 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5421, 0x0) [ 987.190341][T31216] loop3: p1 p2 p3 p4 [ 987.194646][T31216] loop3: partition table partially beyond EOD, truncated [ 987.202238][T31216] loop3: p1 start 458762 is beyond EOD, truncated [ 987.208950][T31216] loop3: p2 start 25 is beyond EOD, truncated [ 987.216783][T31216] loop3: p3 start 10 is beyond EOD, truncated [ 987.222936][T31216] loop3: p4 start 3976200192 is beyond EOD, truncated [ 987.411399][T31226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:47 executing program 4: clone3(&(0x7f00000013c0)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 987.510908][T31231] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 987.519786][T31231] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 987.539665][T31216] loop3: p1 p2 p3 p4 [ 987.544105][T31216] loop3: partition table partially beyond EOD, truncated [ 987.551824][T31216] loop3: p1 start 458762 is beyond EOD, truncated [ 987.558472][T31216] loop3: p2 start 25 is beyond EOD, truncated [ 987.564840][T31216] loop3: p3 start 10 is beyond EOD, truncated [ 987.570986][T31216] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:47 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810000ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000900ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg$alg(r3, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000080)="647f0d92612e20befa8ff87f90eca55383196836", 0x14}, {&(0x7f0000000100)="85c998e1f8b6d4aa41b3f54cb98d0d3a0f59aca036e6ab91938c64c7227b60a6cacaebeafa310dfd587b5470c57c5cdd39924d03c5fa16", 0x37}], 0x3, &(0x7f0000000240)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x4}, @op={0x10}, @iv={0x48, 0x117, 0x2, 0x38, "10959400aff61ffd902a6d04a0df1a3985e5ff22699a4942cd485b7e7dee2dbda03509134020b62f4d76d958b57952cad602f23c2f2121b9"}, @assoc={0x10, 0x117, 0x4, 0xffff}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x98, 0x20008051}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="23e8150b50ad01ab3e453c4f5b09feb33d7fb39f08713dc0ebe9a008b7a1a5f00bba300c5b9215d05c2b73f252aca0c70b9937c715fe472c09788fbeb9643b7d525d5c42b9a3f45bcce1f430f6e410f8be4df0ab61598229e5655c8f521c5313e781fe943ff70e11", 0x68}, {&(0x7f0000000380)="780bff8ea6ce6f6f24d34a27bb08dcdf66a3094a26d4ccc95fc4788bbbddbcd6af8f11bef24e4c7dc3", 0x29}], 0x2, &(0x7f0000000400)=[@assoc={0x10, 0x117, 0x4, 0xfffffff7}, @assoc={0x10, 0x117, 0x4, 0x4}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x40, 0x40000}, {0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000440)="b621c505fc0ed6829ef95374740254e94e708cb46e10f03efb62aeddda70f02cb22f12668465cc3fa5be922fddadaae4e8066f35f1c016b68e7f4af0aab423e29d2036bae991fac2b2857560e04476bc43322d36998d023851e0368101", 0x5d}, {&(0x7f00000004c0)="fac00dc559150892a2fa5c4f13f03df388e90bc6071d612bd6c2b1b64e2a27756ad27a9aaf78bbee77dffcf2fbc910d9efe1d9e8fa40f2c2515492966aa724af766eaff89875f04d0ee08cc37227f635568f519426b14218b0edd375972c1649b26a4ce99382f93b20601fbfee808f9c57fbfeec9c3e7abb01e081252bdff421a045c7d13b2f9ca31f216e0b7853db420065452e0bd918e07217b0a2184b1ed53360526c5761cc177e0667", 0xab}], 0x2, &(0x7f00000019c0)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x7fffffff}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x7fff}, @op={0x10}], 0x50, 0x814}, {0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001a40)="ed424b5edc1129eb572f51e1f8264c2280fae7cab1b40c0a24d69a03ca80a8b1a7defb298644049eb0ab24c74ba36e5bf376a2b7679321d418c33eabe0df9594378b7034aa563752e500d061eb9f4c8a2b92d2ad1fe90159bb4814130788fb7caf0e513a98df098e4343e9d1855ae639699de617a9cfeebcabfe54a174a38a8d942bcbe365b7203f30594cc85633236b1de0d12942e7a6ddde3f3c4022c146ba97e6d5ecc7bba5d08bbca5017af70e5e3cc4decfd350ed813af7c81f3f95626d12196cd1d5042765c2d481272d2bc7f41544e10f592f084e8aca7756f072e6", 0xdf}, {&(0x7f0000001b40)="772597c97b214119fc9babfccdcbc8ffe3b7eba92bd7321d734181740407d504ca3398ec55035040168c2aacddad2ea17f28dc68b9548fc3aeafd2f152e0a44467242768d5d11021e571866879fb261ce14f13d5b591531fbc150546051c39cde693e419c2343a9d280bea859e28c414391b18925ca788d7c0e618791f967bd646f68fbc0a3714a4d90fd6", 0x8b}, {&(0x7f0000001c00)="dd9053c8f7dc1137c5dcd1eb0ad73a1cbb6bd52bc3a38ffb8104145d34169de6dca71b08d7eea02c063777adf32df6d5216c0bf89facb921778db7f82e9aa043ad92b0e5c5b79c7eb986fc98c3cb4ba0f4a66b027f49be9c7ad26db86c4d76ee30844163062b9379fae886c440dd189b6aac71f8590b9a54381d4c719210d205ae640c06c1efc5790dde577757addc4ff0f4ded7d88beef2a96d4d10e5a09572124d57a57699529a325b192e6d9dc38d5047ec9dfd10c90bc1e6257ac751f7ba847fb474976ccb872aa282bb6a84671919657cce9e2e31237684e23dcbc09d4504aaf55b490ce2439a1c5c64707b658c6a0f73152c427db4d6d9b9b90d649c9f9062a0f8aa9bc72f0daea8a48f7e6bb54fd8b9da0cfc7ac2e2e9a31d8e78322e925e223cbee577a8bfbfb0f43cc9abd4724ddcc65f0e40862cd699634d40b82268f4192ae2a106756a8ca1be8029175052fecd49c5cf45e0c2a25882f3a904b43ddbbe15d26d066a9ace73e15cf7db0b1afc68a71b266bc3d346b0ddf76448367b3bd6b4df00e87993745d6f32d9cb6aec8350d4c166bf5036b3dfd16f650b1813cec4b127c60d28e9718c8da6470da88c7f1e2da99eff146fb383475a3491d9d2315645cd065e53d6383d15edad3f6d45fba54b3d128d0da0273e2db8384f3018fc1c6777c9056341e9c663b1cfc87249cedd8e489e0f3383b0a986104d29942dea384f7ee6970d7885898baa604541e4f887c861806dd750f21f2e0c097991d13027ccafc28dcee19fffa96494946cfb78f107568119b245e8cb9a7adbf16fe9ab68f558bcb5c95eecbdb1dd6dd733f8afeaa8e7ecd81a19449b77788e9af4e0a6c6c425d7060abc948e62592dc5c020120781b96269876eae2ba8f7faddb7b235043f95bc5372fa4bf4a40aed3969a287347560992160064b6c8c0ad31c78fc9d69168b5ee579d7334ba29cbb0500bf7fd143fbe66387fa5629f8da1d353e2ccee324583d17f9fdf577c42472cffb864329b051685a967023aacf25c0b3edd25202673b028c9bebf89f95db94873f24f6d4f5f265bcaed18efaab034742dbc0a17454279a39428e9ddf1624d4db79db1987365f47f159f39dff50dca21ac9c1986c1e352d08987ad2ae8ab2742293f74effc6fae1e50353c4dcca6a01da9916f1d43a1438c4b3cfa14c3b16e0675c7f5cc09538d6708ca218a5ca15790d689699a89544ae1be6c8c2e82bf5e343e9cc9a80d3c1a099e9f460b11cdb8b5c581e434fc666310a28471fa36871a3cf50058ffc644ed6437f4993ae42e5c30fa25ebcb11617660e8beda70aecb621236f76c9e72fe5d13ea81b2fb53e4ca17043db7d94a3b00151fd556e3886efb6284f3a9576fe4bc400eb40aed36f286da94b375cf709b03ae1ee0bce92dca8f12aa0712326c4cdfb53c34ecac90efbe6ad9a0de8a8fbbbff8da6205d1ba1f311efcf5adece1ef226afa9f512e5394bb5aeadab325f553cbe9ac79230b2edfe1c1060c566e4a931c23aa8c0b80066c202a43b9013b5768f004527ed19278d9a32742368f47f1cd9246b486478285d8940749446b8ac3f7bd0e3e9112ca4502b5bbaf1601d620916b2866bd9e8f1f5346f75151af46630954f6f7b88f30a15b170f857d10f4aa5477fe34f1012b91e436312b8fb6d845420049fa16c06458bafbcf6085148659903ef8128d0881f827a501604153d8e0c06ecdcfb3ca9910e6c12629056e3fe4d061989bfac81163080cd6ddb853fd40bba9f36fb363553dd5c62d74cd26bd258a2d19be83a775b9db0c56a263edb39b222b3742af79a6d66c901e66c19df2ca3e21e8788fd4956f6be29501c9d3e03275c0a20ac9e6dd609ab1bb034f1d5e2b1bd97550bea3c00d8adb20ae2b2c7cd1facbe5d25a05f4edbfb4941c9326408a8dc4caf16b5e8c52bd5dc0d35c5dc49a7b61266fae6438f4c3165b950aeceee0b876c29d686117d80f245247b89cc3b97371e4a003d8773a46957036c6319ba61117b53c24065be74178b090e49a54a5fde0c33b2f15d4ed0feabbf9115bc02bc2a919042b912d15b04bd248da2f9dea9471fd649eab8b31565be39e39e95104fada0d6d15ceec66d9ac86a80d3a5a9647e1041d0de50ea88d34f1d736a81a323e2fd1f7f8fe47838a16c0435088482e9bfb15d8890446311bfd334e0f0250a1f84615b9059acd9ba073944c2eaae83dca5331cdcf635d046ace7788ab1133c4feb5cf6615b71dcfe775567e790e9de92eb9e8660da7d19a8cad7537c05d98b9b1aff81acf06a6e4ac1a9e44fb2da60c3a869f2cf74d18ab83dc4ab681494fb3bce66bb5b0ccb7cdb02df1265820e232bca2234bb0739fe7b9d03a5eae26d766d5a71c70bb93dee35a60e929380198f4a6256a241db67f358a68caf7103c9c123834a54972b1abad81073400649c2fb7d8d0e7aa26f5d63fcb6bfae84ab0403f45ccd8aaf32dbade884dbd454d704c5a59f1c1c5fc5660478dd92203b901d4bf1e4626052e3986f2debe50819e0eed6c427829f8b86d47028f59775567e6d1d86d940d92e11afc6de61d5d7491d7e32110c605c973aebbb46cd69ca9aa5e8fc89f52ef3c95e0d6550141ac2feca861ff7ef22582c97af4f39614ea13a53634281648687c0d7361bc96d34fe91573f8cae4f8f2a79475ed0384ba815fe2ede7e42e22ff2ef19cac849e18de149a618bb5745ef135ac8e3d428f6b214043a64bfe0c31f2d1ff80712ac2ea7e558b1b08d222bb797676a0819e97fe7d7c4f788c16c96116c582aa193c835b4c1744e4c717736e9443adaba67ec3dcac3eed438cd82eab6e501b3ecde5642db3b3851e69c3a13a7cec837a57f173f8747376d9266d720f2de5cc483da1b03e6a16ae0da7d2afd171452af32696ed9ab771ed5e3ab0155b8c4599e572f75e51a2518505d1765a5af8ac3e6c5c42c9c9bb875df2ecedfb2e331b9860058560f37ea9d404f4d7b9937fed2194895399f328d2c806eaa01f50ea1e8110fe7f1a66584a9bfd64d0132c20f17053b47da9da115eeb7625e100faa1f84262018d8728f6bffacb2ba2376fe0ce925e91175305a17925ce367a7b43b506ecca5e24c7d5e9aa5ed19f7ab7f497f089c11afdc838124eb323c4ca822ac6487d2d952db926337899f584c69d589e1e02ab459d08ce01cd6084a883fdef2455105579669cc502f46fdf76497a41f72ec3bb1687c59e8c51ea5c754f6acdab2880625da2626d11ac750fdddc82dc234bac4b8dc81a8b258a533a2fd007452af3f6c6a0a7ae119b1c1e0d161380fcf5a33b70154e634939fd01c545173332f5fbc9f94ad480770f0907aa5d36dfccf42f61f8a7936e92f737abb8c4131ddfa8ae26b8976811ea84b6e1b5632d183949928bc8137dd881bbb0216dd5c26420cf020c6cc1aa9b075eb336ce9746b706c42596fe167e5423c2a11e8a83bb05269c76af68b39258ff259e2197cdb56c90c68e81d1cde439a1f98ee082f9a5c32060a573eb7da1d1082137b2abeea9b374c26abe6a2119e83a86166671e9a2e98c879fbabf2fd3b5d6d2ac3eec4a1ce2ef14c0e34da7f8d1ce0546aabbdd827b7d23e6af34d5d96243f4176ce33ea7fae43411d911f0f5a0efe961250126974da9a1b5e5b578011356a27a7f2a41a34e9b88d89fad3564845a50886faae544ceff4d10e20965797c170cbf0b7b98e651b02f896611facecd04fa85d23e17cf460da2b077afaa57c1c8a99545538b63f49f24c3a14d5f74f2d96c62152c658878a48ee387fecf61cf7ae340b5f2e4201d6ccd0d7e58af8b74468ebca613bc9264ea225c95ac838761d2dd96b613524d5e8513ce1b38cc4d9581d1fd950c37ed0656bf47af7050d84a81ec858c45530cd1f411e0f93869278bf2570cbde89cefa4657d14cccfe7b832eefa80e182242112ca4b19fe4bc672e95750087a7556b560a7f6019b31626fdebb6854283a268577037dbdb7ba329e118482a73b31adb0c2c12cb14f6e3faa2bd4587366a9d7b3ffdbc7a4512b5270df2524030f17ae4f8262f0992e0903d229975eb057d5e46f96b61e10cbf8812b17f868e71b80baf3b3fcd8afebc3c45d2beeb17f95b00a9a9b79495f0bf577b4e2e7530cdf653382a91f832b8a41f4fd869df57a6f3b4ff6757e57ca539d4d32bb0977e505fb1a1763135896f6b92d3002834f9667034a9c5f590994553d3fe21a691a794f8a26701cf7233a76a290de381a38c3a3082950265fe93b1fb2fe396a06421df35207c73da0f62e4dbad2f42edab58ddb452f43f6689b0402d33e4bdbf580090b753d3947bf40fa72a1ee2f720ef571a0382ac356372677d369259c11c84a48e711eff9a5e7b8f1a9356c13a642cc354319eb6135952bdb1b608827e4b1fabef5405cb140877b7263710f1847a1c162ef4934812e9723d3e6d601e5903eedf97c25585fdcca9cbd55a1d1f36f0c0fd5da4a28a5d7f81eb1b1ecc9653d055fe670bc5748444d2f3f1473f68b1b8561c2271108722e31e822d8cfb67957e716551544700ef5c29f39c3b916c949c7c87350aee16bd782accea8f177fa450d0921c47ec2909a02198143ff9501bac40e5fdccafe1b1f41bad477c61793b7947c5de00880a204a5336139ef24cdb44d470810d7722523faae7476fd46574abd876ba197e7943e28c520b0965aa02ea98c462c6db28bbe5b7d5c234eff83b143fc8a7de815311a058ed5f83441702e0e4dc69e3a2ec1edc7c8b22a125ce8060d4f7a2de0098fc6a2a9e8ab0318bb06df32ec3129616f8b9b9169ce39f3e87f97ba3be8460e95292498cf155935d09108830623a2aadf634a884477983ff387e1a34b17880afb66f4a95e2ff196f5499588b680487057140bf1705a66f4c5a04f9860e9c5509ad51edb163bec91e010a6a76e3b09a416c503e35b3254e42eb1b2bee3f41b92a558b02298927d5ea3d9067caee1cf096e09e3511576bbb477e90dc0ddc5005da73a926d45266cc3ae21ad1eeb89300f06205c7f970e8711efd72c325d032afee5487c81a52da43d58da8a43ee6eec2446fd47bd1a5df07875093922dbc042dddf82e195f40ec42d27adea07af92a7383b8103309e88e66dab76701c4118a5f15c62e3e6167d0d067bc2bb9b2acf4d240ff861b6bccbe95ef4b086e84e517e52b91edc86140bbc6965f765095a64131954dc5fac7c283af55798db516a18139c50c71c4c2179d3abe6364426f654f2e9308092dfc4bea8197ba744448df6ed09b0de8f7e54f1697f3c7761b277aa2e568f2208f2b1ec3dc2321efea01383835970d161c138fd0448532ac198893e2cc16a9d6761e4755be29ba928eced6b49075dab291265997d36d00d5adff7fecd727bd912c53604dce62b9538023420093ef4d8bf86434015406ba79f9f92fbf496c667e54b3a96a59e8255e3bc185d218cbe4906c90119e2f233390788ffa6ce6dfd113db60dca2667d4bc1a47f7a823493ce0c4747a8dbdb411f8cd782d289acb255701585d13b36441394a173cb2b6e16228bd82674326897dae3cdd04ac140a01049c38b952fb301ab9f3ff87428944235a5b2594b069ab1355e6a1efa446d58a189fce7643d6cbb1f385be54d66e82bfd33a7b8ac7d763105aea2085a7685c954c7ff93c9ee551eed431ad9acda8c37fb3cac8080b221e533aa1f4d3b63e62bccb69b638c13d07c044ce1ca0013918286f36c591e60c512c2131ef7d35db902b599ca97cdc8e32e72f95bbc9bd5f58579aa438f112a6bcf6c23ca63d3", 0x1000}, {&(0x7f0000002c00)}], 0x4, &(0x7f0000002c80)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x40, 0x4000000}], 0x4, 0x20000085) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r4 = openat$capi20(0xffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x10000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0, r4}, 0x64) 13:25:47 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8940, &(0x7f0000000100)={'ip6_vti0\x00'}) [ 988.159541][T31246] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 988.168147][T31246] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 988.255596][T31247] loop3: p1 p2 p3 p4 [ 988.259844][T31247] loop3: partition table partially beyond EOD, truncated [ 988.267622][T31247] loop3: p1 start 589834 is beyond EOD, truncated [ 988.274232][T31247] loop3: p2 start 25 is beyond EOD, truncated [ 988.280369][T31247] loop3: p3 start 10 is beyond EOD, truncated [ 988.286633][T31247] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 988.494216][T31260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 988.529195][T31257] loop2: p1 p2 p3 p4 [ 988.533990][T31257] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2b9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:48 executing program 5: rt_sigaction(0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001980)) [ 988.613736][T31257] loop2: p2 size 100663296 extends beyond EOD, truncated [ 988.681048][T31257] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 988.710363][T31257] loop2: p4 start 3976200192 is beyond EOD, truncated [ 988.805948][T31247] loop3: p1 p2 p3 p4 [ 988.810136][T31247] loop3: partition table partially beyond EOD, truncated [ 988.818048][T31247] loop3: p1 start 589834 is beyond EOD, truncated [ 988.824729][T31247] loop3: p2 start 25 is beyond EOD, truncated [ 988.831064][T31247] loop3: p3 start 10 is beyond EOD, truncated [ 988.837387][T31247] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:48 executing program 4: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x2a02) [ 988.969190][T31274] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 988.977879][T31274] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 989.060828][T31257] loop2: p1 p2 p3 p4 [ 989.065830][T31257] loop2: p1 size 78398975 extends beyond EOD, truncated [ 989.179539][T31257] loop2: p2 size 100663296 extends beyond EOD, truncated [ 989.189555][T31257] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 989.206621][T31257] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ba, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:49 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x70bd28, 0x0, "e8"}, 0x14}}, 0x0) 13:25:49 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810002ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup3(r3, r1, 0x80000) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000100)={0x5, r5}) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) [ 989.575664][T31290] loop3: p1 p2 p3 p4 [ 989.579774][T31290] loop3: partition table partially beyond EOD, truncated [ 989.587553][T31290] loop3: p1 start 655370 is beyond EOD, truncated [ 989.594244][T31290] loop3: p2 start 25 is beyond EOD, truncated [ 989.600407][T31290] loop3: p3 start 10 is beyond EOD, truncated [ 989.606703][T31290] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:49 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7ffc, 0x0) [ 989.760343][T31298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 989.927175][T31290] loop3: p1 p2 p3 p4 [ 989.931239][T31290] loop3: partition table partially beyond EOD, truncated [ 989.939201][T31290] loop3: p1 start 655370 is beyond EOD, truncated [ 989.945953][T31290] loop3: p2 start 25 is beyond EOD, truncated [ 989.952101][T31290] loop3: p3 start 10 is beyond EOD, truncated [ 989.958398][T31290] loop3: p4 start 3976200192 is beyond EOD, truncated [ 989.996450][T31318] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 990.005368][T31318] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 990.024642][T31314] loop2: p1 p2 p3 p4 [ 990.029195][T31314] loop2: p1 size 78398975 extends beyond EOD, truncated [ 990.087003][ T31] audit: type=1107 audit(1604582749.900:13): pid=31306 uid=0 auid=0 ses=4 subj==unconfined msg='è' [ 990.128089][T31314] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 990.190530][T31314] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 990.252025][T31314] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:50 executing program 5: r0 = io_uring_setup(0x2e55, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r0, 0x0) 13:25:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2bb, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 990.497921][T31314] loop2: p1 p2 p3 p4 [ 990.502514][T31314] loop2: p1 size 78398975 extends beyond EOD, truncated [ 990.524251][T31314] loop2: p2 size 100663296 extends beyond EOD, truncated [ 990.535900][T31314] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 990.560032][T31314] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:50 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810003ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:50 executing program 4: clone3(0x0, 0x4f) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8bb, 0x10902) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'netdevsim0\x00'}) [ 990.796799][T31344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 990.860116][T31348] loop3: p1 p2 p3 p4 [ 990.864519][T31348] loop3: partition table partially beyond EOD, truncated [ 990.872134][T31348] loop3: p1 start 720906 is beyond EOD, truncated [ 990.879085][T31348] loop3: p2 start 25 is beyond EOD, truncated [ 990.885398][T31348] loop3: p3 start 10 is beyond EOD, truncated [ 990.891540][T31348] loop3: p4 start 3976200192 is beyond EOD, truncated [ 990.998088][T31362] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 991.008264][T31362] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CSA_IES={0xe80, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE={0x35, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x30, 0x3, "0f8967a07cd8103eca954f9be9a370d54367221753a06a429c0f37c61a0bc5f8d03160a3a85bbe993777c6b2"}]}, @NL80211_ATTR_PROBE_RESP={0x1bd, 0x91, "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"}, @NL80211_ATTR_IE={0xd, 0x2a, [@channel_switch={0x25, 0x3}, @ibss={0x6, 0x2}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x209, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x249, 0x80, [@tim={0x5, 0xbe, {0x0, 0x0, 0x0, "ccffcb9029523208095ba3cb19dddba3c74b811722e8e4f8a19387d41fc02ef6da87f6efa133eabbe464b363b230fe04e0b79319b031cfb50f2ca0caa895ecde7c65ac426928250070065437ba4646a55b81d284a616f15a7959a9426e9d6ff94ca9545930aecbc9fc66edffc62e9dceb14de0c4c7b9d433116acf1d3136a485db6dc2d90c8d4ec3f8f4a695c0041361da4133861619cc0d798101f6aba2116d7950977d79b20fea6d867d7f95dae569d2de533f272752ff4c9e3d"}}, @mesh_config={0x71, 0x7}, @ibss={0x6, 0x2}, @random_vendor={0xdd, 0xe6, "aa11d10e6caaf75f0796c83cdc5d1f67f8bdcae9d7455861fd95bc9602928b60ca56338465d4ff1e04d48895a967bad66bb138b77bf16f8a6f503a784cec4790b93044487f55387ac40fec65a1b4a0f06e4a1118b2261ff4bfb6ccf95e5d91fb8a9a7a81d88c7cc85408ae51989dad40752164b75901d3375c1f6837bc3a463623a3a4897085082ae29f63905670b3d7ec2fa9696ee5199353c0abfd5aafd1ca603efb1ed11f7986c65331f92da21cbd7d8dad0ae5881f4706b111d2d1e54793e3a1bcedd8ebc02b956bf1bc03cf7d65b9d7014b52d8e0bd764eaeec7f465f3aa93031399c6d"}, @perr={0x84, 0x8e, {0x1f, 0x8, [@ext={{}, @device_b}, @not_ext, @ext={{}, @device_a, 0xfc5, @broadcast}, @ext={{}, @broadcast}, @ext={{}, @device_b}, @ext={{}, @broadcast, 0x0, @broadcast}, @ext={{}, @device_a, 0x0, @device_b}, @not_ext={{}, @device_b, 0x8}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1cd, 0xe, {@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x4e, {0x0, 0x0, 0x0, "653b64459a73517c9038779fb0a3f327f96a8ca26d22704796041aba935f91ce62d37b04a4be4fc458f73e51285ac7f4b0dfc7317b610591a62f4d05aa9317c986fcac065f36b25cf7eca3"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x2b, "fc6b045e52144f06c509bd6d4d3c471c155ccb2945bd64832b99bff682836019ce08c1ff9c70e8413f5692"}, {0xdd, 0xe7, "b16b493fc60387490e1907a65bb6130258ef9be968bf45199fc200e18101b849064c4b30a75fdbce5572134382098fcc656af9a221d6f31a63f245a3cd0286cb9f90bfe9514bc4334210a98510a27dee3d1436f1d55451efd95bbe6fd6ff6ffecdc11448734597707ce75b84801729966f74de24295472ff01f9989625e68e312674ae503a78efe592503795dde7f2fcabdefa6af8ff3e7122ff2abfb2c3906d19c1aac6707b6d27fe27154baec9010b7a9b20c43c58828d89a891dd8872c87a362c66fd07e9303aeb9fdb97d6495c22d298ab28e4a60f2081db0798baef9ca5bcc37d3e1b6f18"}]}}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@challenge={0x10, 0x1}, @perr={0x84, 0x2f, {0x0, 0x3, [@ext={{}, @device_a, 0x0, @device_b}, @not_ext={{}, @broadcast}, @not_ext={{}, @broadcast}]}}, @erp={0x2a, 0x1}, @mesh_config={0x71, 0x7}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @random_vendor={0xdd, 0x6e, "b625c0735ca4c275c75a4b4e9bd5df92f40efaf35493cfde0ff062438c170ad2c16f4e6e38aa3c6a0f0129dbda4c181335da874c133690610be738584803b5e66856346719269923554a5701c907b4de00882114dc5cd5fee05035cb94a268bfccc1bb08d000305b177a71717cb4"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_TAIL={0x6d, 0xf, [@ext_channel_switch={0x3c, 0x4}, @cf={0x4, 0x6}, @mic={0x8c, 0x10, {0x0, "b6217b210fb6", @short="42487234ba94bfbd"}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @device_b}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x0, "1ef96f91eafd", @long="f28288a518070d38d632a92056f7bb8a"}}]}, @NL80211_ATTR_IE={0x1d, 0x2a, [@channel_switch={0x25, 0x3}, @supported_rates={0x1, 0x7, [{}, {}, {}, {}, {}, {}, {}]}, @sec_chan_ofs={0x3e, 0x1}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@ext_channel_switch={0x3c, 0x4}, @mic={0x8c, 0x18, {0x0, "e1d86baeaa98", @long="39cf05e9c6cd72f06b182677dc7b0a4a"}}, @challenge={0x10, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x415, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2}, @supported_rates]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @val, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7}, @void}}]]}]}, 0xec4}}, 0x0) 13:25:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 991.244370][T31348] loop3: p1 p2 p3 p4 [ 991.248591][T31348] loop3: partition table partially beyond EOD, truncated [ 991.256409][T31348] loop3: p1 start 720906 is beyond EOD, truncated [ 991.262900][T31348] loop3: p2 start 25 is beyond EOD, truncated [ 991.269185][T31348] loop3: p3 start 10 is beyond EOD, truncated [ 991.275668][T31348] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x880, 0x4) 13:25:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2bc, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 991.436427][T31372] loop2: p1 p2 p3 p4 [ 991.441086][T31372] loop2: p1 size 78398975 extends beyond EOD, truncated [ 991.462797][T31372] loop2: p2 size 100663296 extends beyond EOD, truncated [ 991.522249][T31372] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 991.564131][T31372] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a600b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:51 executing program 5: socketpair(0x2, 0x2, 0x7, &(0x7f0000000000)) [ 991.849982][T31386] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 991.858419][T31386] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 991.977030][T31387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:51 executing program 0: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x244001, 0x0) setns(r0, 0x8000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000000c0)={[0x6000, 0x6000, 0x4, 0xd000], 0x9, 0x91, 0x3f}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x0, 0x80008, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:52 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810004ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:52 executing program 4: syz_open_dev$video(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snd/seq\x00', 0x260800) 13:25:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2bd, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 992.611374][T31400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 992.766054][T31411] loop3: p1 p2 p3 p4 [ 992.770229][T31411] loop3: partition table partially beyond EOD, truncated [ 992.778198][T31411] loop3: p1 start 745482 is beyond EOD, truncated [ 992.785197][T31411] loop3: p2 start 25 is beyond EOD, truncated [ 992.791343][T31411] loop3: p3 start 10 is beyond EOD, truncated [ 992.797663][T31411] loop3: p4 start 3976200192 is beyond EOD, truncated [ 992.902711][T31425] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 992.911180][T31425] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 992.969568][T31417] loop2: p1 p2 p3 p4 [ 992.974261][T31417] loop2: p1 size 78398975 extends beyond EOD, truncated [ 993.047561][T31417] loop2: p2 size 100663296 extends beyond EOD, truncated [ 993.134135][T31417] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:25:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a610b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 993.230815][T31417] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2541"], 0x50}}, 0x0) 13:25:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2be, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:53 executing program 4: socketpair(0x6, 0x0, 0x0, &(0x7f0000000400)) [ 993.519491][T31417] loop2: p1 p2 p3 p4 [ 993.524185][T31417] loop2: p1 size 78398975 extends beyond EOD, truncated [ 993.600747][T31446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 993.620926][T31417] loop2: p2 size 100663296 extends beyond EOD, truncated [ 993.695180][T31417] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 993.770392][T31417] loop2: p4 start 3976200192 is beyond EOD, truncated [ 993.781287][T31456] loop3: p1 p2 p3 p4 [ 993.785661][T31456] loop3: partition table partially beyond EOD, truncated [ 993.793310][T31456] loop3: p1 start 745738 is beyond EOD, truncated [ 993.800021][T31456] loop3: p2 start 25 is beyond EOD, truncated [ 993.806412][T31456] loop3: p3 start 10 is beyond EOD, truncated [ 993.812587][T31456] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0x80000001, 0x0, 0xf8, 0x8, 0x35, 0x5, 0x4, 0x7, 0x6, 0x3d, 0x0, 0x20}, {0x7f, 0xffff, 0x7, 0x1f, 0x4, 0x58, 0xdd, 0x0, 0x6, 0x81, 0x2, 0x0, 0x3}, {0x400, 0x6, 0x2, 0x2, 0x1, 0x6, 0x9, 0x8, 0xfa, 0x4, 0xf8, 0xff, 0x5}], 0x2}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) syz_mount_image$omfs(&(0x7f0000000080)='omfs\x00', &(0x7f00000000c0)='./file1\x00', 0x67a84749, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="1f697146b58adb3f89c259bcd8c66102fa2499446037cb7ea61576d0511c8697f5e5827cfdb5ca5f151aaf69a99c9077acf0c50aea3d0f07053f51fdc1d2804f59c5044e", 0x44, 0x9}, {&(0x7f0000000100)="9e327e7cab19648d457f8f4ccd7e6c89f8ce46b5ff5de19cc4091f57ace4c8d928408d54f0ceddbb91f7", 0x2a, 0x8}], 0x1001000, &(0x7f0000000300)=ANY=[@ANYBLOB='/dev/kvm\x00,/dev/kvm\x00,uid=', @ANYRESDEC=0xee00, @ANYBLOB="262c9415673b4aa4bff3268c3128d9552ad34804ead1e2bcb424219a35d6171feeda47d4e05dcfb2288b7a56bf819bb6acfa15cd7f113db8c302c5db286b0866d1d203f76809d09a4521d464336f980ac7221549ec0968b938082c0c8ced5348857edc2c60f0bd32510a"]) [ 993.908492][T31463] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 993.916803][T31463] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 993.978622][T31465] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 994.017849][T31456] loop3: p1 p2 p3 p4 [ 994.021989][T31456] loop3: partition table partially beyond EOD, truncated [ 994.030806][T31456] loop3: p1 start 745738 is beyond EOD, truncated [ 994.037492][T31456] loop3: p2 start 25 is beyond EOD, truncated [ 994.044613][T31456] loop3: p3 start 10 is beyond EOD, truncated [ 994.052077][T31456] loop3: p4 start 3976200192 is beyond EOD, truncated [ 994.110447][T31468] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 13:25:54 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810005ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2bf, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x50}}, 0x0) 13:25:54 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f0000002440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb8", 0x49}, {&(0x7f00000003c0)="f0583ac29776b175c108434c251d2996f169fa34891154de372b60d30b7e13b8a820cc31b4dc8a98236205d5c5329b8482ae7ac5a999d57dc5a723cd5eede9b9edda4b522a6a4a42b8076e488ef139f0baa6bd32babe0c990c66a75c9956b8272a0ba6d52cbc094e996f6cb52e5bb9d2c5abeb1621f359b622fdbbe583c1d262bc28fc4d856e83a3b3cbcfcd83d8ed0c9184f31afac72189b6896a321993fdf79568ee4506113d22bef08fbc36aa5c9cbc600ffedd7d500aa3aa933dddaae7e82eac134d436af91d9a893a262388a7e8c3256a4042a07366998bc11e5884d9853f08f7eebebc4b41323144308cc64ae9913afe5bbed9765b08f447b723eb97199b2fd202ea2017e0cd5efa17f5e993396f29debd1159de0f8836d890b3d81d8cc2a3cf95b0910b6c739928a03a80284dda986c1d6f6899e445b5f8eec34985be9d75447646f44baf1321c3c112971c0caae973a32c05a69f091c9c9622e3e66d2458befc41e72805c8e7349d07e22f890db3d1f1409ef9f2027155844fbd4f7d104e62405dbce5a810181cd05072b94826780b6950180572e93543a736af99858cd6ed71ee4fe722e1e28c2329a6e2f1720bf8fecc96dd3434d6696851845630650548cb8d548a8cde246769913a743257954a8d4d9950ff419c25b5a2db3d817170d0ac70942acbf77bf9746f94bc45a07731ddb9b45d99994a649c3f7f19a75da137f0347babf5df5fea1cccc1392c0434f4cb80164a62e30eebc59f9f53e6f5673ad7753bfb50352ffd9541a943e2a9ac095e8321f7e48223e69398c9fb08429e37aae353cffa23de86fca4f74a5c15aa6d15acbe410341ff99132337400d65e5ab0b19dd7a68a74d69c2b44c7ad7d71e8c480e96c65f31c9bb3f1b1b9bd8a9d9e485cdcb361d5408461bb7eb42d22b8a140cda3239aa5033e57abe392ba62371cb35d49b5abe79587ed299709f542b4a08a72ffae9f488893e257ae1cd0cfc18e124bad5e476a3a18c97c40b571cdb511b69bfe60aad8a9909eb2a639d315b53e2cffcd13d04ca116aa88e90e7ce06658bca74921ee05461ae13076c8c51ae8fbd37eff7d61b8928069a469b1cd5076d9f156e84864e9f729dc8c6b4a967d8188138357a34e5eb1e350e4e4688170b5fa87c78e8a294dbf64d551a1a2e82eba19ac81bcf622a15c754725ae3b38c4240f9f5835aafd8ee6a95a9e83c11e68be8ad5835c49f0f623b168efdb670af3743a2bd64f7ed039f80dd1c9ad1d93d7ba6b43cd91a0339f95969f5bf4468757016f654ee67b07cd34cf60a643ca9e04770005a0025e24dcc14f5f712da46d5909714f73a7a3a64db16efa0b57fdec4acea474a8f5800b1dbbc264608aa6bdbc0cd0a21c2b4c7e7e7f825dc551389686b3e917926a48f1bc6a6695a5de4acc3a966bd33e7014327390db9a158271674a5f3d779195cb4ffc3e185d7b9e95eff5da68e89cdcc2b0bf1f390581f9dcc81db50382c69f811647307db2e033be601fc22a5cfd18679768111d3d8e98bc8f987db0c1911a3b39910d56abdead660cffa1c7e547d7868fb75796393f2748b102d79302e712e4f8e38d986626b2168151b80b32d6f8026831d4d00b52e519c6616711b17f95f4822329c151fc5deb482e98505385dd1fe855ddfed02bfba4caa14a8c0daa7be61d35a59499b02af98bf8ab586ad194229234c6528182e52e7abbb3ca22ed4b5e2e1b144d9a3ed3057b6e2383255e055b7317a96fb4261a48215b4a453d7edf9d11cef2e13dcc798e5b5f27f4a6bac604fe04fab212894888bd035749c91ce42bfbd7fb7df5211f77c42bfae9a077303503c890207ffb987f65b183ecb495fb242ceac7d8b546376b9a8d2f7baf71374a69bfd7cf20692a16d4155dff1a1a00e8b4488ebba6268d15ace5f13a580ab2f8308fbbee8722a77270e5fb7546d4b5493f2247b14aa2e0e4a927ecc8f9f", 0x574}], 0x2}}], 0x1, 0x1c00) recvmmsg(0xffffffffffffffff, &(0x7f000000afc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=""/174, 0xae}}], 0x1, 0x0, 0x0) 13:25:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a620b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 994.828531][T31495] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 994.837076][T31495] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) [ 994.958977][T31498] loop2: p1 p2 p3 p4 [ 994.964002][T31498] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$dupfd(r0, 0x406, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 995.023066][T31498] loop2: p2 size 100663296 extends beyond EOD, truncated [ 995.033275][T31498] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 995.046965][T31498] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:54 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8904, 0x0) [ 995.188201][T31498] loop2: p1 p2 p3 p4 [ 995.192818][T31498] loop2: p1 size 78398975 extends beyond EOD, truncated [ 995.284105][T31498] loop2: p2 size 100663296 extends beyond EOD, truncated [ 995.293204][T31498] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 995.364185][T31498] loop2: p4 start 3976200192 is beyond EOD, truncated [ 995.417857][T31518] loop3: p1 p2 p3 p4 [ 995.422043][T31518] loop3: partition table partially beyond EOD, truncated [ 995.429865][T31518] loop3: p1 start 745994 is beyond EOD, truncated [ 995.436539][T31518] loop3: p2 start 25 is beyond EOD, truncated [ 995.442787][T31518] loop3: p3 start 10 is beyond EOD, truncated [ 995.449121][T31518] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 13:25:55 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810006ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'vlan0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x8}}) [ 995.799167][T31518] loop3: p1 p2 p3 p4 [ 995.803312][T31518] loop3: partition table partially beyond EOD, truncated [ 995.811229][T31518] loop3: p1 start 745994 is beyond EOD, truncated [ 995.819614][T31518] loop3: p2 start 25 is beyond EOD, truncated [ 995.826123][T31518] loop3: p3 start 10 is beyond EOD, truncated [ 995.832478][T31518] loop3: p4 start 3976200192 is beyond EOD, truncated [ 996.093371][T31538] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 996.101760][T31538] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:25:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a630b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:25:56 executing program 4: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000000080)) 13:25:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 996.506440][T31546] loop2: p1 p2 p3 p4 [ 996.511360][T31546] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:56 executing program 5: [ 996.563930][T31546] loop2: p2 size 100663296 extends beyond EOD, truncated [ 996.667980][T31546] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 996.731690][T31546] loop2: p4 start 3976200192 is beyond EOD, truncated [ 996.754303][T31554] loop3: p1 p2 p3 p4 [ 996.758672][T31554] loop3: partition table partially beyond EOD, truncated [ 996.766618][T31554] loop3: p1 start 746250 is beyond EOD, truncated [ 996.773341][T31554] loop3: p2 start 25 is beyond EOD, truncated [ 996.779641][T31554] loop3: p3 start 10 is beyond EOD, truncated [ 996.786023][T31554] loop3: p4 start 3976200192 is beyond EOD, truncated [ 996.918005][T31560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 996.987342][T31565] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 996.996085][T31565] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.109192][T31546] loop2: p1 p2 p3 p4 [ 997.114246][T31546] loop2: p1 size 78398975 extends beyond EOD, truncated [ 997.144234][T31546] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 997.197273][T31546] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 997.219191][T31546] loop2: p4 start 3976200192 is beyond EOD, truncated [ 997.239184][T31554] loop3: p1 p2 p3 p4 [ 997.243701][T31554] loop3: partition table partially beyond EOD, truncated [ 997.254178][T31554] loop3: p1 start 746250 is beyond EOD, truncated [ 997.260710][T31554] loop3: p2 start 25 is beyond EOD, truncated [ 997.267055][T31554] loop3: p3 start 10 is beyond EOD, truncated [ 997.273661][T31554] loop3: p4 start 3976200192 is beyond EOD, truncated 13:25:57 executing program 4: 13:25:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:57 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810007ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:57 executing program 5: 13:25:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a640b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 997.656898][T31589] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 997.668543][T31589] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.808171][T31590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:57 executing program 4: 13:25:57 executing program 5: [ 998.082130][T31600] loop2: p1 p2 p3 p4 [ 998.086956][T31600] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 998.155346][T31600] loop2: p2 size 100663296 extends beyond EOD, truncated [ 998.205729][T31600] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 998.233154][T31610] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 998.245804][T31610] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 998.262069][T31605] loop3: p1 p2 p3 p4 [ 998.267460][T31605] loop3: partition table partially beyond EOD, truncated [ 998.275653][T31605] loop3: p1 start 746506 is beyond EOD, truncated [ 998.282800][T31605] loop3: p2 start 25 is beyond EOD, truncated [ 998.289431][T31605] loop3: p3 start 10 is beyond EOD, truncated [ 998.295895][T31605] loop3: p4 start 3976200192 is beyond EOD, truncated [ 998.329834][T31600] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:58 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810008ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:25:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:25:58 executing program 4: [ 998.999566][T31621] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 999.008850][T31621] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 999.039546][T31618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:25:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a650b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:25:59 executing program 5: 13:25:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 999.368547][T31630] loop2: p1 p2 p3 p4 [ 999.373448][T31630] loop2: p1 size 78398975 extends beyond EOD, truncated [ 999.485348][T31630] loop2: p2 size 100663296 extends beyond EOD, truncated [ 999.522633][T31635] loop3: p1 p2 p3 p4 [ 999.527380][T31635] loop3: partition table partially beyond EOD, truncated [ 999.535420][T31635] loop3: p1 start 746762 is beyond EOD, truncated [ 999.542765][T31635] loop3: p2 start 25 is beyond EOD, truncated [ 999.549391][T31635] loop3: p3 start 10 is beyond EOD, truncated [ 999.556086][T31635] loop3: p4 start 3976200192 is beyond EOD, truncated [ 999.594953][T31630] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 999.607923][T31630] loop2: p4 start 3976200192 is beyond EOD, truncated 13:25:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000326bd7000ffdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003400000008006b00020000001100240002029b121682039be90304248200000004010801"], 0x48}, 0x1, 0x0, 0x0, 0x200c8040}, 0x20000800) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x8001, 0x0) recvfrom$netrom(r8, &(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000000080)={{0x3, @null}, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x210058, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 999.701577][T31643] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 999.712381][T31643] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 999.820157][T31630] loop2: p1 p2 p3 p4 [ 999.825227][T31630] loop2: p1 size 78398975 extends beyond EOD, truncated 13:25:59 executing program 4: [ 999.884780][T31630] loop2: p2 size 100663296 extends beyond EOD, truncated 13:25:59 executing program 5: 13:25:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 999.996037][T31630] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1000.005841][T31630] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1000.055481][T31635] loop3: p1 p2 p3 p4 [ 1000.059783][T31635] loop3: partition table partially beyond EOD, truncated [ 1000.067835][T31635] loop3: p1 start 746762 is beyond EOD, truncated [ 1000.075480][T31635] loop3: p2 start 25 is beyond EOD, truncated [ 1000.081728][T31635] loop3: p3 start 10 is beyond EOD, truncated [ 1000.087996][T31635] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:00 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810009ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:00 executing program 4: 13:26:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a660b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1000.324323][T31659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1000.478715][T31671] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1000.488118][T31671] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:00 executing program 5: 13:26:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x5, 0x2f4, [{0x8001, 0x0, 0x1ff}, {0x4, 0x0, 0x7fff}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x7fffffff}, {0x1ff, 0x0, 0x100000001}]}) [ 1000.911044][T31682] loop3: p1 p2 p3 p4 [ 1000.915445][T31682] loop3: partition table partially beyond EOD, truncated [ 1000.923288][T31682] loop3: p1 start 747018 is beyond EOD, truncated [ 1000.930421][T31682] loop3: p2 start 25 is beyond EOD, truncated [ 1000.938396][T31682] loop3: p3 start 10 is beyond EOD, truncated [ 1000.945517][T31682] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:00 executing program 5: 13:26:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1000.977445][T31680] loop2: p1 p2 p3 p4 [ 1000.982224][T31680] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:00 executing program 4: [ 1001.065796][T31680] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1001.113755][T31680] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1001.162304][T31680] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1001.237229][T31691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1001.473291][T31706] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1001.482208][T31706] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1001.510229][T31680] loop2: p1 p2 p3 p4 [ 1001.515275][T31680] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1001.525613][T31680] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1001.536357][T31680] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1001.546829][T31680] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:01 executing program 5: 13:26:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$RAW_CHAR_CTRL_GETBIND(r4, 0xac01, &(0x7f00000000c0)={0x1, 0x7, 0x0}) 13:26:01 executing program 4: 13:26:01 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000aff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:01 executing program 5: [ 1002.125551][T31721] loop3: p1 p2 p3 p4 [ 1002.129751][T31721] loop3: partition table partially beyond EOD, truncated [ 1002.137707][T31721] loop3: p1 start 786442 is beyond EOD, truncated [ 1002.144495][T31721] loop3: p2 start 25 is beyond EOD, truncated [ 1002.150647][T31721] loop3: p3 start 10 is beyond EOD, truncated [ 1002.156969][T31721] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:02 executing program 4: [ 1002.271533][T31721] loop3: p1 p2 p3 p4 [ 1002.275815][T31721] loop3: partition table partially beyond EOD, truncated [ 1002.283401][T31721] loop3: p1 start 786442 is beyond EOD, truncated [ 1002.290356][T31721] loop3: p2 start 25 is beyond EOD, truncated [ 1002.296614][T31721] loop3: p3 start 10 is beyond EOD, truncated [ 1002.302761][T31721] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1002.362347][T31734] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1002.373351][T31734] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2c9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1002.644523][T31737] loop2: p1 p2 p3 p4 [ 1002.649285][T31737] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:02 executing program 5: [ 1002.789391][T31737] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1002.801410][T31742] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1002.809926][T31742] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.875470][T31737] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000d00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1002.930150][T31737] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:02 executing program 4: 13:26:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ca, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) bind$x25(r3, &(0x7f0000000080)={0x9, @remote={[], 0x3}}, 0x12) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1003.276279][T31755] loop3: p1 p2 p3 p4 [ 1003.280535][T31755] loop3: partition table partially beyond EOD, truncated [ 1003.288339][T31755] loop3: p1 start 851978 is beyond EOD, truncated [ 1003.297049][T31755] loop3: p2 start 25 is beyond EOD, truncated [ 1003.303203][T31755] loop3: p3 start 10 is beyond EOD, truncated [ 1003.309921][T31755] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:03 executing program 4: 13:26:03 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000bff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:03 executing program 5: [ 1003.498744][T31761] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1003.507246][T31761] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2cb, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:03 executing program 4: [ 1003.882037][T31768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000e00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:03 executing program 5: [ 1004.115857][T31778] loop2: p1 p2 p3 p4 [ 1004.120571][T31778] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1004.178172][T31778] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1004.248175][T31778] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1004.287836][T31788] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 13:26:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1004.296395][T31788] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1004.335940][T31778] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:04 executing program 4: 13:26:04 executing program 5: [ 1004.556268][T31792] loop3: p1 p2 p3 p4 [ 1004.560523][T31792] loop3: partition table partially beyond EOD, truncated [ 1004.568770][T31792] loop3: p1 start 917514 is beyond EOD, truncated [ 1004.575400][T31792] loop3: p2 start 25 is beyond EOD, truncated [ 1004.581547][T31792] loop3: p3 start 10 is beyond EOD, truncated [ 1004.587856][T31792] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2cc, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:04 executing program 4: 13:26:04 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000cff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1004.934362][T31792] loop3: p1 p2 p3 p4 [ 1004.938536][T31792] loop3: partition table partially beyond EOD, truncated [ 1004.946339][T31792] loop3: p1 start 917514 is beyond EOD, truncated [ 1004.952852][T31792] loop3: p2 start 25 is beyond EOD, truncated [ 1004.959482][T31792] loop3: p3 start 10 is beyond EOD, truncated [ 1004.965759][T31792] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1005.067421][T31813] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1005.076261][T31813] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:05 executing program 5: 13:26:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:05 executing program 4: 13:26:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xef, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7e, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x7a, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x4, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xa0, 0x9}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0x5, 0x1, 0x40, 0xd6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0xb, &(0x7f0000000180)=@string={0xb, 0x3, "e82b86534a8a2ec2fb"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}]}) 13:26:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2cd, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1005.606850][T31823] loop2: p1 p2 p3 p4 [ 1005.611525][T31823] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1005.658234][T31823] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:05 executing program 5: [ 1005.715818][T31826] loop3: p1 p2 p3 p4 [ 1005.719888][T31826] loop3: partition table partially beyond EOD, truncated [ 1005.727760][T31826] loop3: p1 start 983050 is beyond EOD, truncated [ 1005.734776][T31826] loop3: p2 start 25 is beyond EOD, truncated [ 1005.740944][T31826] loop3: p3 start 10 is beyond EOD, truncated [ 1005.747182][T31826] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1005.787615][T31823] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1005.842927][T31836] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1005.853074][T31836] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1005.872965][T31823] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:05 executing program 4: 13:26:06 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000dff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:06 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a001100ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1006.294461][T10877] usb 1-1: new low-speed USB device number 9 using dummy_hcd 13:26:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ce, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:06 executing program 5: 13:26:06 executing program 4: [ 1006.593798][T10877] usb 1-1: device descriptor read/64, error 18 [ 1006.709043][T31854] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1006.717608][T31854] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:06 executing program 4: [ 1006.831779][T31856] loop2: p1 p2 p3 p4 [ 1006.836800][T31856] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1006.902342][T31856] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1006.916873][T31858] loop3: p1 p2 p3 p4 [ 1006.921232][T31858] loop3: partition table partially beyond EOD, truncated [ 1006.929069][T31858] loop3: p1 start 1114122 is beyond EOD, truncated [ 1006.935888][T31858] loop3: p2 start 25 is beyond EOD, truncated [ 1006.942029][T31858] loop3: p3 start 10 is beyond EOD, truncated [ 1006.948681][T31858] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:06 executing program 5: 13:26:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2cf, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1007.025260][T10877] usb 1-1: device descriptor read/64, error 18 [ 1007.064594][T31856] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1007.122015][T31856] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1007.294558][T10877] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 1007.308602][T31875] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1007.316957][T31875] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1007.345427][T31858] loop3: p1 p2 p3 p4 [ 1007.349691][T31858] loop3: partition table partially beyond EOD, truncated [ 1007.357462][T31858] loop3: p1 start 1114122 is beyond EOD, truncated [ 1007.364273][T31858] loop3: p2 start 25 is beyond EOD, truncated [ 1007.370417][T31858] loop3: p3 start 10 is beyond EOD, truncated [ 1007.376664][T31858] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1007.564652][T10877] usb 1-1: device descriptor read/64, error 18 [ 1007.955810][T10877] usb 1-1: device descriptor read/64, error 18 [ 1008.078212][T10877] usb usb1-port1: attempt power cycle 13:26:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x10, 0x7f, 0x3, 0x0, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x8000, 0x7800, 0x101, 0x80000000}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r5, 0x604, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x2004c414) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1008.797587][T10877] usb 1-1: new low-speed USB device number 11 using dummy_hcd 13:26:08 executing program 5: 13:26:08 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000eff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a001200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:08 executing program 4: 13:26:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1008.990144][T31894] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1008.998787][T31894] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:09 executing program 5: [ 1009.129562][T31895] loop3: p1 p2 p3 p4 [ 1009.133893][T31895] loop3: partition table partially beyond EOD, truncated [ 1009.141471][T31895] loop3: p1 start 1179658 is beyond EOD, truncated [ 1009.148518][T31895] loop3: p2 start 25 is beyond EOD, truncated [ 1009.154790][T31895] loop3: p3 start 10 is beyond EOD, truncated [ 1009.160944][T31895] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1009.247167][T31897] loop2: p1 p2 p3 p4 [ 1009.251868][T31897] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1009.292749][T31897] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1009.293945][T10877] usb 1-1: device not accepting address 11, error -71 [ 1009.320315][T31897] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:09 executing program 4: [ 1009.344709][T31897] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1009.548404][T31897] loop2: p1 p2 p3 p4 [ 1009.553106][T31897] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1009.566032][T31897] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1009.576470][T31897] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1009.587216][T31897] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:09 executing program 5: 13:26:09 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810010ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a002000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1009.919424][T31925] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1009.927995][T31925] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x28040201}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r4 = gettid() tkill(r4, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) get_robust_list(r4, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000400)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) 13:26:09 executing program 5: 13:26:09 executing program 4: 13:26:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1010.336241][T31933] loop3: p1 p2 p3 p4 [ 1010.340517][T31933] loop3: partition table partially beyond EOD, truncated [ 1010.349196][T31933] loop3: p1 start 2097162 is beyond EOD, truncated [ 1010.355880][T31933] loop3: p2 start 25 is beyond EOD, truncated [ 1010.362196][T31933] loop3: p3 start 10 is beyond EOD, truncated [ 1010.368481][T31933] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1010.427579][T31937] loop2: p1 p2 p3 p4 [ 1010.432202][T31937] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1010.450386][T31937] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1010.498087][T31937] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1010.552502][T31937] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:10 executing program 4: 13:26:10 executing program 5: 13:26:10 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810011ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1010.938054][T31955] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1010.946625][T31955] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:10 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a002500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:11 executing program 4: 13:26:11 executing program 5: [ 1011.441480][T31967] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1011.449926][T31967] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1011.496070][T31964] loop2: p1 p2 p3 p4 [ 1011.500826][T31964] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1011.556274][T31966] loop3: p1 p2 p3 p4 [ 1011.560535][T31966] loop3: partition table partially beyond EOD, truncated [ 1011.568547][T31966] loop3: p1 start 2424842 is beyond EOD, truncated [ 1011.575284][T31966] loop3: p2 start 25 is beyond EOD, truncated [ 1011.581419][T31966] loop3: p3 start 10 is beyond EOD, truncated [ 1011.589840][T31966] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1011.608283][T31964] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1011.694785][T31966] loop3: p1 p2 p3 p4 [ 1011.696233][T31964] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1011.698917][T31966] loop3: partition table partially beyond EOD, truncated [ 1011.699348][T31966] loop3: p1 start 2424842 is beyond EOD, truncated [ 1011.720122][T31966] loop3: p2 start 25 is beyond EOD, truncated [ 1011.726500][T31966] loop3: p3 start 10 is beyond EOD, truncated [ 1011.732645][T31966] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1011.805111][T31979] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1011.813079][T31964] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1011.813312][T31979] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.066116][T31964] loop2: p1 p2 p3 p4 [ 1012.070752][T31964] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1012.093793][T31964] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1012.122458][T31964] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1012.135818][T31964] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x8000, 0x1, 0x1}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:13 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a002f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:13 executing program 4: 13:26:13 executing program 5: 13:26:13 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0201810012ff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1013.511468][T32011] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1013.519943][T32011] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1013.553997][T32009] loop2: p1 p2 p3 p4 [ 1013.558649][T32009] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1013.627292][T32009] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1013.638891][T32012] loop3: p1 p2 p3 p4 [ 1013.643276][T32012] loop3: partition table partially beyond EOD, truncated [ 1013.651520][T32012] loop3: p1 start 3080202 is beyond EOD, truncated [ 1013.659520][T32012] loop3: p2 start 25 is beyond EOD, truncated [ 1013.667602][T32012] loop3: p3 start 10 is beyond EOD, truncated 13:26:13 executing program 4: [ 1013.676957][T32012] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:13 executing program 5: [ 1013.766673][T32009] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1013.800566][T32018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1013.856381][T32009] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:14 executing program 5: 13:26:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4b3800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:14 executing program 4: 13:26:14 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181005eff0a000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1014.609840][T32038] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1014.618258][T32038] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1014.667183][T32040] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1014.897278][T32049] loop3: p1 p2 p3 p4 [ 1014.901345][T32049] loop3: partition table partially beyond EOD, truncated [ 1014.909955][T32049] loop3: p1 start 3689226 is beyond EOD, truncated [ 1014.916852][T32049] loop3: p2 start 25 is beyond EOD, truncated [ 1014.923024][T32049] loop3: p3 start 10 is beyond EOD, truncated [ 1014.929314][T32049] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:14 executing program 5: 13:26:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead3a25aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b0000000000000000000000005a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d7493794c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:15 executing program 4: [ 1015.245837][T32049] loop3: p1 p2 p3 p4 [ 1015.250029][T32049] loop3: partition table partially beyond EOD, truncated [ 1015.257881][T32049] loop3: p1 start 3689226 is beyond EOD, truncated [ 1015.264851][T32049] loop3: p2 start 25 is beyond EOD, truncated [ 1015.274051][T32049] loop3: p3 start 10 is beyond EOD, truncated [ 1015.280221][T32049] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:15 executing program 5: 13:26:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a003f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1015.446727][T32058] loop2: p1 p2 p3 p4 [ 1015.451292][T32058] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1015.472659][T32058] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1015.486239][T32058] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1015.497860][T32058] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1015.647996][T32058] loop2: p1 p2 p3 p4 [ 1015.652729][T32058] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1015.667768][T32072] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1015.676782][T32072] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:15 executing program 4: [ 1015.740905][T32058] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1015.854814][T32058] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1015.869504][T32058] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1015.928587][T32077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3298067980 (3298067980 ns) > initial count (245943448 ns). Using initial count to start timer. [ 1016.017217][T32084] loop3: p1 p2 p3 p4 [ 1016.021310][T32084] loop3: partition table partially beyond EOD, truncated [ 1016.029211][T32084] loop3: p1 start 4128778 is beyond EOD, truncated [ 1016.035952][T32084] loop3: p2 start 25 is beyond EOD, truncated [ 1016.042084][T32084] loop3: p3 start 10 is beyond EOD, truncated [ 1016.048592][T32084] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1016.161381][T32088] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1016.169896][T32088] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:16 executing program 5: [ 1016.247134][T32092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3298067980 (3298067980 ns) > initial count (245943448 ns). Using initial count to start timer. 13:26:16 executing program 4: 13:26:16 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff02000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2d9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1016.405304][T32084] loop3: p1 p2 p3 p4 [ 1016.409404][T32084] loop3: partition table partially beyond EOD, truncated [ 1016.417495][T32084] loop3: p1 start 4128778 is beyond EOD, truncated [ 1016.424265][T32084] loop3: p2 start 25 is beyond EOD, truncated [ 1016.430402][T32084] loop3: p3 start 10 is beyond EOD, truncated [ 1016.436670][T32084] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x301, 0x4) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:16 executing program 5: [ 1016.778716][T32101] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1016.787153][T32101] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:16 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:16 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff03000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:17 executing program 4: 13:26:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2da, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:17 executing program 5: [ 1017.576114][T32120] loop3: p1 p2 p3 p4 [ 1017.580386][T32120] loop3: partition table partially beyond EOD, truncated [ 1017.588239][T32120] loop3: p1 start 4194314 is beyond EOD, truncated [ 1017.594957][T32120] loop3: p2 start 25 is beyond EOD, truncated [ 1017.601108][T32120] loop3: p3 start 10 is beyond EOD, truncated [ 1017.607459][T32120] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x6, 0x6, 0x8, 0x1, 0xffffffff, 0x0, 0xfffffdc2, 0x20, 0x81, 0x2, 0x5, 0xdc26, 0x20, 0x200}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000980)={{r4, 0x100000001, 0xff, 0x9, 0x2, 0x9, 0x101, 0x8, 0xfffffffb, 0xdf, 0x5, 0x7, 0x1, 0x8, 0x3}}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x2, 0x200d, 0x3, 0x6, 0x3, 0x2, 0x7}}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x8001, 0x0) accept4$llc(r5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:17 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) [ 1017.757257][T32120] loop3: p1 p2 p3 p4 [ 1017.761433][T32120] loop3: partition table partially beyond EOD, truncated [ 1017.769302][T32120] loop3: p1 start 4194314 is beyond EOD, truncated [ 1017.776482][T32120] loop3: p2 start 25 is beyond EOD, truncated [ 1017.782628][T32120] loop3: p3 start 10 is beyond EOD, truncated [ 1017.789179][T32120] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1017.817684][T32124] loop2: p1 p2 p3 p4 [ 1017.822369][T32124] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1017.894754][T32124] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1017.905900][T32124] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1017.943045][T32124] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2db, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1018.217767][T32124] loop2: p1 p2 p3 p4 [ 1018.222407][T32124] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1018.245851][T32124] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1018.268906][T32124] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1018.278176][T32124] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:18 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r0) 13:26:18 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff04000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:18 executing program 4: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x35ea, &(0x7f0000002540), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f00000025c0), &(0x7f0000002600)) [ 1018.616350][T32165] loop3: p1 p2 p3 p4 [ 1018.620685][T32165] loop3: partition table partially beyond EOD, truncated [ 1018.628904][T32165] loop3: p1 start 4325386 is beyond EOD, truncated [ 1018.639666][T32165] loop3: p2 start 25 is beyond EOD, truncated [ 1018.646479][T32165] loop3: p3 start 10 is beyond EOD, truncated [ 1018.656215][T32165] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2dc, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1018.779769][T32165] loop3: p1 p2 p3 p4 [ 1018.783990][T32165] loop3: partition table partially beyond EOD, truncated [ 1018.791651][T32165] loop3: p1 start 4325386 is beyond EOD, truncated [ 1018.798483][T32165] loop3: p2 start 25 is beyond EOD, truncated [ 1018.804774][T32165] loop3: p3 start 10 is beyond EOD, truncated [ 1018.810920][T32165] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1018.891336][T32177] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1018.899769][T32177] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2dd, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1019.262927][T32184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1019.337016][T32192] loop2: p1 p2 p3 p4 [ 1019.341678][T32192] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1019.375536][T32192] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1019.433012][T32192] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:19 executing program 5: accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1019.549658][T32192] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1019.611241][T32213] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1019.619728][T32213] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1019.648420][T32208] loop3: p1 p2 p3 p4 [ 1019.652556][T32208] loop3: partition table partially beyond EOD, truncated [ 1019.660480][T32208] loop3: p1 start 4718602 is beyond EOD, truncated [ 1019.667210][T32208] loop3: p2 start 25 is beyond EOD, truncated [ 1019.673475][T32208] loop3: p3 start 10 is beyond EOD, truncated [ 1019.680522][T32208] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1019.792079][T32192] loop2: p1 p2 p3 p4 [ 1019.796777][T32192] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x1ffc}, @timestamp, @timestamp], 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x8, 0x0, 0x0, 0x80040, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1019.844437][T32192] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1019.854314][T32192] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1019.875936][T32192] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400)='/dev/nvram\x00', 0x0, 0x0) connect$l2tp(r0, 0x0, 0x0) 13:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2de, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1020.172628][T32208] loop3: p1 p2 p3 p4 [ 1020.176949][T32208] loop3: partition table partially beyond EOD, truncated [ 1020.184833][T32208] loop3: p1 start 4718602 is beyond EOD, truncated [ 1020.193430][T32208] loop3: p2 start 25 is beyond EOD, truncated [ 1020.200077][T32208] loop3: p3 start 10 is beyond EOD, truncated [ 1020.206312][T32208] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:20 executing program 5: bpf$BPF_LINK_CREATE(0x13, 0x0, 0x0) 13:26:20 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff05000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0ab84a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xb1306bb06cd7971a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x4009, 0x4f, 0x0, 0x304008, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1020.605165][T32250] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1020.613444][T32250] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:20 executing program 4: add_key(&(0x7f0000000380)='cifs.idmap\x00', 0x0, &(0x7f0000000400)='7', 0x1, 0xfffffffffffffff9) [ 1020.775827][T32253] loop3: p1 p2 p3 p4 [ 1020.780049][T32253] loop3: partition table partially beyond EOD, truncated [ 1020.787920][T32253] loop3: p1 start 4896778 is beyond EOD, truncated [ 1020.794719][T32253] loop3: p2 start 25 is beyond EOD, truncated [ 1020.803048][T32253] loop3: p3 start 10 is beyond EOD, truncated [ 1020.809680][T32253] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1020.919049][T32259] loop2: p1 p2 p3 p4 [ 1020.924027][T32259] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1020.946093][T32259] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1021.001734][T32259] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1021.039409][T32253] loop3: p1 p2 p3 p4 [ 1021.043817][T32253] loop3: partition table partially beyond EOD, truncated 13:26:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2df, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1021.051378][T32253] loop3: p1 start 4896778 is beyond EOD, truncated [ 1021.058182][T32253] loop3: p2 start 25 is beyond EOD, truncated [ 1021.065238][T32253] loop3: p3 start 10 is beyond EOD, truncated [ 1021.071389][T32253] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:20 executing program 5: bpf$MAP_DELETE_ELEM(0x23, 0x0, 0x0) [ 1021.118038][T32259] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1021.318279][T32259] loop2: p1 p2 p3 p4 [ 1021.322862][T32259] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0af84a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1021.439764][T32259] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1021.461091][T32259] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = geteuid() syz_mount_image$efs(&(0x7f0000000080)='efs\x00', &(0x7f00000000c0)='./file0\x00', 0x20, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="8e17125e5c149048db934c9da85393d484ee652f2e4689e98c3a1d401c5469a2d3c82d5eb5ea35d415a90916f1df9a5cd4bc8b089fa582dce75e24ff0db6d03a56120463f6b5a0215d3098d56d6491", 0x4f, 0x7fffffff}, {&(0x7f0000000100)="54a751db1853bfc7145f812bdad522443e36cbc046", 0x15, 0xb7}, {&(0x7f0000000200)="12dd4a43d44b6d2738b3b033d20bdeb80a036b5b0f37f26a88db99c58e7b635d5bfd2fbe88ac8171da2bc58a5ba143b7107097f023f972640948f18d3527b0c0c0214d1050cac6a0cda081bc7907b31eb7def238c8b7ae5c79a23ee2c9a9ccd368721f527fbe247caf95912c7ffc1381303db2e49f06dbd4eadcc05c7e43a3d2eb2102e393ce6125f8dab9c53df5556a2639cd7bbc49fbcbf859b873b77ff4bfaff74104e44116180046fc646aa920faf90f63639fe9b4b5b0b9488217d17c535b2adc948ab396ac2eda", 0xca, 0x3f}], 0xc002b, &(0x7f0000000b00)={[{'/\x00\t'}, {'w\x84\xe3p\xd3!^\xb8\x00'}, {'/de\xf6/ivtD'}, {'/dev/kvm\x00'}, {}, {'/dev/kvm\x00'}, {'/dev/kvm\x00'}, {'/dev/kvm\x00'}], [{@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, '\xfb\b<\xb6\xd6\x98\xc9\x01[$q\xf3\x92\x869=\xd3M%\x88\n\xd3l.\xa2\x9b\x8d\xc0\xc1e$q\xc8i\xaa\xc9\xfb\x18\x04\xc4\x94\xe4\xf3T\xf0\x9c\xf1I\xad\x88\xe7Gq.w\xf0\x91\x85\xb9\x19~;\x19\xa8\x1cM\x05\x17\xc1\rg\x95\t\xfe\xe9\xf0`>r\xe1\x151f\xdbA#}y&\xd2\xbdc\x8e\xbf\xc3\x17\xd6W\x84.\xa8\x98\x8bB|j\xc7a\x1bI3\xd4\">\x1dm\xbe\xe8\x00\x03Ob#\x88\x05\b\xd1+\x19~\xff\xf4+i_q\x17^\xb9l\xfe\xca\x13\xd0\xb9i\x81\xcaN\xab\xb1\xc46\x03X\x16\xbdzT\xc9\x90^\x14\xf9e\x97z\x02\xfb\xce\xea\xe2\xa9K\a\x84+wL\xdd\xb1K*\x92\x9f\x01\x00\x86:\x99\xefR\x9e\xf8'}}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xc0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x5}, 0x0, 0x0, &(0x7f00000004c0)={0x4, 0xc, 0x3f, 0xc7d7}, &(0x7f0000000500)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={r4}, 0x4) open$dir(&(0x7f0000000ac0)='./file0\x00', 0x2e0800, 0x80) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x8001, 0x0) connect(r5, &(0x7f00000003c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x1e, 0x5c, "4a742f28767eb36b03c6359263e8a6e2b25a02ea92f9b42518d2dcc316c7aafa6d877bd01b6ef857e9fddffebc4e8ea96ca1208523ef0778176eb544336355", 0x3f}, 0x80) [ 1021.485111][T32280] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1021.493306][T32280] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1021.511930][T32259] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:21 executing program 4: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)) 13:26:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) creat(0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) [ 1021.716119][T32288] loop3: p1 p2 p3 p4 [ 1021.720228][T32288] loop3: partition table partially beyond EOD, truncated [ 1021.730139][T32288] loop3: p1 start 4913162 is beyond EOD, truncated [ 1021.739284][T32288] loop3: p2 start 25 is beyond EOD, truncated [ 1021.745510][T32288] loop3: p3 start 10 is beyond EOD, truncated [ 1021.751671][T32288] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1021.855556][T32288] loop3: p1 p2 p3 p4 [ 1021.859742][T32288] loop3: partition table partially beyond EOD, truncated [ 1021.868692][T32288] loop3: p1 start 4913162 is beyond EOD, truncated [ 1021.876652][T32288] loop3: p2 start 25 is beyond EOD, truncated [ 1021.882838][T32288] loop3: p3 start 10 is beyond EOD, truncated [ 1021.889151][T32288] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:21 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}, 0x38) 13:26:21 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff07000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="18cd3435ade7"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x40) pread64(r0, &(0x7f0000000280)=""/243, 0xf3, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f0000000380)) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a384b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1022.376751][T32316] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1022.385159][T32316] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:22 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000004800)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000006880)='/dev/nvram\x00', 0x0, 0x0) 13:26:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1022.756068][T32320] loop3: p1 p2 p3 p4 [ 1022.760312][T32320] loop3: partition table partially beyond EOD, truncated [ 1022.768066][T32320] loop3: p1 start 4929546 is beyond EOD, truncated [ 1022.774887][T32320] loop3: p2 start 25 is beyond EOD, truncated [ 1022.781032][T32320] loop3: p3 start 10 is beyond EOD, truncated [ 1022.787378][T32320] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a784b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1023.417322][T32336] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1023.427564][T32336] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:23 executing program 4: bpf$BPF_LINK_CREATE(0x6, 0x0, 0x0) 13:26:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0ac44b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0xe94108be5f8d0638, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x5f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1024.405580][T32343] loop3: p1 p2 p3 p4 [ 1024.409924][T32343] loop3: partition table partially beyond EOD, truncated [ 1024.417847][T32343] loop3: p1 start 4965386 is beyond EOD, truncated [ 1024.424643][T32343] loop3: p2 start 25 is beyond EOD, truncated [ 1024.430794][T32343] loop3: p3 start 10 is beyond EOD, truncated [ 1024.438072][T32343] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1024.579902][T32348] loop2: p1 p2 p3 p4 [ 1024.585644][T32348] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1024.680876][T32348] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1024.739220][T32348] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1024.851112][T32348] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1024.906767][T32343] loop3: p1 p2 p3 p4 [ 1024.910838][T32343] loop3: partition table partially beyond EOD, truncated [ 1024.918760][T32343] loop3: p1 start 4965386 is beyond EOD, truncated [ 1024.927029][T32343] loop3: p2 start 25 is beyond EOD, truncated [ 1024.933179][T32343] loop3: p3 start 10 is beyond EOD, truncated [ 1024.939538][T32343] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1025.129953][T32348] loop2: p1 p2 p3 p4 [ 1025.134890][T32348] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1025.152590][T32348] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1025.162932][T32348] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1025.217067][T32348] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) creat(0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 13:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:25 executing program 4: mq_open(&(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0, 0x0) 13:26:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x4e20, 0x2, @loopback, 0x9}}}, 0x84) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0aec4b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff09000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1025.549193][T32385] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1025.557704][T32385] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) creat(0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) [ 1025.715103][T32391] loop3: p1 p2 p3 p4 [ 1025.720821][T32391] loop3: partition table partially beyond EOD, truncated [ 1025.728968][T32391] loop3: p1 start 4975626 is beyond EOD, truncated [ 1025.735646][T32391] loop3: p2 start 25 is beyond EOD, truncated [ 1025.741789][T32391] loop3: p3 start 10 is beyond EOD, truncated [ 1025.748035][T32391] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1025.908599][T32396] loop2: p1 p2 p3 p4 [ 1025.913272][T32396] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1025.942981][T32396] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1026.005743][T32396] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1026.049204][T32396] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1026.066638][T32391] loop3: p1 p2 p3 p4 [ 1026.070788][T32391] loop3: partition table partially beyond EOD, truncated [ 1026.078686][T32391] loop3: p1 start 4975626 is beyond EOD, truncated [ 1026.085497][T32391] loop3: p2 start 25 is beyond EOD, truncated [ 1026.091660][T32391] loop3: p3 start 10 is beyond EOD, truncated [ 1026.097937][T32391] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1026.161583][T32411] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1026.170099][T32411] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1026.450062][T32396] loop2: p1 p2 p3 p4 [ 1026.454821][T32396] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1026.590576][T32396] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1026.629721][T32423] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1026.640700][T32423] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1026.668135][T32396] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1026.679318][T32396] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f00000000c0)=0x200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0804124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1026.918719][T32428] loop3: p1 p2 p3 p4 [ 1026.922889][T32428] loop3: partition table partially beyond EOD, truncated [ 1026.930953][T32428] loop3: p1 start 4980746 is beyond EOD, truncated [ 1026.938246][T32428] loop3: p2 start 25 is beyond EOD, truncated [ 1026.946559][T32428] loop3: p3 start 10 is beyond EOD, truncated [ 1026.952726][T32428] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff12000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1027.138500][T32433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1027.278363][T32428] loop3: p1 p2 p3 p4 [ 1027.282529][T32428] loop3: partition table partially beyond EOD, truncated [ 1027.290434][T32428] loop3: p1 start 4980746 is beyond EOD, truncated [ 1027.297171][T32428] loop3: p2 start 25 is beyond EOD, truncated [ 1027.303332][T32428] loop3: p3 start 10 is beyond EOD, truncated [ 1027.309679][T32428] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1027.597588][T32456] loop2: p1 p2 p3 p4 [ 1027.602275][T32456] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001400)={0x0, 0x0}) 13:26:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) recvfrom$inet6(r3, &(0x7f0000000180)=""/163, 0xa3, 0x40000101, &(0x7f00000000c0)={0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000100)=0x2) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:27 executing program 4: setuid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) faccessat(0xffffffffffffffff, 0x0, 0x0) 13:26:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1027.658294][T32456] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1027.689990][T32456] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1027.754819][T32456] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:27 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff25000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1028.102481][T32472] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1028.110984][T32472] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff26000000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:28 executing program 5: socketpair(0x2c, 0x3, 0x8, &(0x7f0000000000)) [ 1028.209230][T32474] loop3: p1 p2 p3 p4 [ 1028.213659][T32474] loop3: partition table partially beyond EOD, truncated [ 1028.221289][T32474] loop3: p1 start 5505034 is beyond EOD, truncated [ 1028.228047][T32474] loop3: p2 start 25 is beyond EOD, truncated [ 1028.234358][T32474] loop3: p3 start 10 is beyond EOD, truncated [ 1028.240526][T32474] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:28 executing program 4: socketpair(0x0, 0x8a6057fe65053cbd, 0x0, 0x0) [ 1028.517826][T32480] loop2: p1 p2 p3 p4 [ 1028.522449][T32480] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1028.542856][T32480] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1028.562758][T32480] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:28 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) [ 1028.590760][T32480] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$full(0xffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000000c0)=0x1ff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x7}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000240)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x8001, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r1, 0x1000}, {r7, 0x80}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x8, 0x7]}, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1028.631552][T32474] loop3: p1 p2 p3 p4 [ 1028.635918][T32474] loop3: partition table partially beyond EOD, truncated [ 1028.644199][T32474] loop3: p1 start 5505034 is beyond EOD, truncated [ 1028.650795][T32474] loop3: p2 start 25 is beyond EOD, truncated [ 1028.657109][T32474] loop3: p3 start 10 is beyond EOD, truncated [ 1028.663279][T32474] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1028.791482][T32497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1028.940598][T32480] loop2: p1 p2 p3 p4 [ 1028.945923][T32480] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1028.988466][T32480] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1029.057052][T32480] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1029.086907][T32517] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1029.097155][T32517] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1029.124018][T32480] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:29 executing program 5: clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x35ea, &(0x7f0000002540), &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f00000025c0), 0x0) 13:26:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/231, 0xe7) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:29 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0) 13:26:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff03010000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1029.665913][T32534] loop3: p1 p2 p3 p4 [ 1029.670158][T32534] loop3: partition table partially beyond EOD, truncated [ 1029.677943][T32534] loop3: p1 start 5570570 is beyond EOD, truncated [ 1029.684725][T32534] loop3: p2 start 25 is beyond EOD, truncated [ 1029.690864][T32534] loop3: p3 start 10 is beyond EOD, truncated [ 1029.697348][T32534] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e) [ 1029.806610][T32541] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1029.844568][T32534] loop3: p1 p2 p3 p4 [ 1029.848681][T32534] loop3: partition table partially beyond EOD, truncated [ 1029.856624][T32534] loop3: p1 start 5570570 is beyond EOD, truncated [ 1029.863202][T32534] loop3: p2 start 25 is beyond EOD, truncated [ 1029.869568][T32534] loop3: p3 start 10 is beyond EOD, truncated [ 1029.875928][T32534] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1029.895539][T32549] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1029.903877][T32549] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1030.069519][T32552] loop2: p1 p2 p3 p4 [ 1030.074497][T32552] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1030.089739][T32552] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x4c000, 0x0) 13:26:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1030.207643][T32561] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1030.216089][T32561] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1030.234777][T32552] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1030.255881][T32552] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:30 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{}, [@jmp, @func]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:26:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x4000, 0x0, 0x0, 0x40000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1030.459471][T32552] loop2: p1 p2 p3 p4 [ 1030.464243][T32552] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2e9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1030.503205][T32552] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1030.556552][T32552] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1030.616680][T32552] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:30 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x1833c1, 0x0) [ 1030.771718][T32580] loop3: p1 p2 p3 p4 [ 1030.775993][T32580] loop3: partition table partially beyond EOD, truncated [ 1030.783866][T32580] loop3: p1 start 6029322 is beyond EOD, truncated [ 1030.790450][T32580] loop3: p2 start 25 is beyond EOD, truncated [ 1030.796702][T32580] loop3: p3 start 10 is beyond EOD, truncated [ 1030.802857][T32580] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:30 executing program 4: bpf$MAP_DELETE_ELEM(0x1d, &(0x7f00000026c0)={0xffffffffffffffff, 0x0}, 0x20) 13:26:30 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffab010000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ea, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1031.149575][T32588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4102744954 (16410979816 ns) > initial count (14904338804 ns). Using initial count to start timer. 13:26:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1031.466439][T32609] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1031.475123][T32609] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:31 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 13:26:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1031.683898][T32611] loop2: p1 p2 p3 p4 [ 1031.688503][T32611] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000180)={0xec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe98, 0x3, 0x0, 0x1, [{0x4}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "df7cb41aa6ddf9133fef2e31ca2e671a6a3263e3456fb2697a927170c95d5aba428e3b864caffbd2252a326de03700e1553e330d4ca440f51cd153cc82ff0a699693adada593d0dae57a820a6761bae17ec6e211e985df48511924ec6ee904215d917ad8b669fec766d553ddf6815d2d8962fe8179338425121ec6768c3925da6e560750c2dbcf8b5e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "303eeb8634169e549d0672be95ea3f01f7089c14abd96d5179e08c2f19757983936ebe2c755b1021a43d1c54441c2222dd43e1c9cd1bf7e594a0b060efcb493d4f96e9094c1fa55475430fe51b0fe935da1baf30b528e3ab0cf0a0d80fc44223f8dbbeaeed4ca6692ab6710867dacabc9ed884c689c0b3eae0496880845458fc7badce2b24110793557b307394c0c66ac51000139ccfe61e6e0336fb9efa39b7ac3b67ad2c5ca3d00d8b0058a125f7735d9cc5c5870f5b4a6acfad7e054d64455e3324c004d097d06d"}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x470, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x55, 0x1, "d14568ae7a671f5295c45a037bdd5f01af7acec0ccb202386605a8ae41c2726560eb8df7e1c3f4af9bd91999a14fbe1c62244201a98a5be7966582b3bac6f0f90ffa3daaaa13e3f25944e0cc5982efec6a"}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "0a353a78d6dcdc4077dc5f07a6d39ab97070ffa3bcfaa0171301906d88fb9d2b1702ac7f2c8788b9bd7fd5439c80e78eec961f1dae24f990f0013c824feadac538feefe71dee4ad5dc9adb7cb8d2e71b3e724529e9b9fe3b7c0bf830aeb38c67767349b33aab1e2ee4a8da7af778902dbd8295b51294e004c224d27461"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "5ed225c0cd5144a9a5495f87113959df71c24f23c911539d2d100eea92bd3464a5e7"}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "2bf1223f4bc344e2258e1e1bf06bf939893db848ccef0be9b7febbc0821c62723e821d5d0ee5ffd609d2bd80f3f20f435b328f9a9a314524a550c5de3a2a8708cbe825581f455cc5cb355c8254a2c6de827893f8382a14acd4c8fb3399fbb1c7e7e8caee2fbe8357b8b88cf0d8e795bb4939ef2b3a24513116f8b0dfebaf9f4c485a3a52ec9bc8da29ff21dbebf6a71f0f09159793ecc9cb083eb59bcd7eead20083ffe927e79dfabeaec7b4d8bf937c004c3f2c971d808663f6f76c15839e5cb9fe8d1fe7"}, @NFTA_DATA_VALUE={0x21, 0x1, "b310964f8f099285479d18d9b5ffb119b709abc3eea77a162b93756dd9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff00}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x51, 0x1, "003664e051be80d9f0a3730d3e105434865cdc19f581c7aaa6590b8ccf343a81467693383c119ea1a5988edf71410c5e415401741f06d22932b92f68665511513938060f15f70313f13fd0c051"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "2d12a53a31a6f476a567181fb2c51038aa00ca5c76c6b139f996ec7e7faf8771e0a51dcf024b479c67ab2a9b1efa"}, @NFTA_DATA_VALUE={0xc1, 0x1, "e545e146dbbc9d4ca01b7c6abc6237b58cb77c1938f182dc7879c390c0c4a8110964b23d812e7cf47728539845103c50e8d1dfc3b00288e3f1fe966a4b24b6e4b4d9ec37fafa1bd8fec933f227c61c61238ce80cac3c862516002d9ddd73e9b5605cc5c56026e28d29a9dd900bd1a7553b0b89ddbbf9b6a7dfa7262f7587912c8dd0841b28a21169ea02c3c1a5ad79324bea093489fb657368b5dffc80f3c32fc3b37e4a6b7a969bf99dcd632aef8a27ed7ab185c8c750d4569514f414"}]}]}, {0x75c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "9481277386bdac19505c8bf2deda97b3fa973c84e990b3abfd"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "b88f01d61b0b56a99b1c428b162fa886753af54c9eb411757cce0bead034a4c00824813f81bc6e8dcee30935a3a96aee88c187c60ae39e7e660348a7dd84f228d63a9d0b2bef504759af892a3ee0f3157d568930ec3abf2e7065de81e1a564e8d1b93b80f0676bae990216c7873837e7d375edbeaf59bbfed40796f9ae2f8a4938a757c2ee338b04c8bba9b9fc51e45661fb2c98766976253ba49ac53e9127ca040d75898ec2c010b5bf3bfab5da5883d6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "355f3a104b81c821cf8744bfc16c966df1bd66ca2c72a25435e2886d1ac6b662d2886fe28c9e1f048ff2394639e3075602674ef7ab4a0062f9873d051860d127529c323ed16bed27a23fd53aac776b7ae4cfd578611e21a5a7b7e54f9d56fe2eb7d75df39535af413f0d90f2f13f3f9048ff848e97486cab8a83f4f4a26190bcfbf1486993b9bea72e5f675c5a061a4b80ded7267618ffe4b0f24beee620890dd93dbf8dc3201d22b231e0d655be5b5c2ae8c090b63b36bfdc5f8bf4f3979d76097446d97d100f514bef4d97a4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x49, 0x1, "e74be9c5fc3c896bd440104539f2bf0d3423479bd33fabcf153887c45870745173720a8460727935214cdeeac583cbe83ddef3a2be7c529a8118a0504a8b1975e2e34d2b89"}]}, @NFTA_SET_ELEM_KEY={0x428, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x3f1, 0x1, "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"}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd6, 0x6, 0x1, 0x0, "13599c4a620268f5f29374e27d2b4abb67a91ed140214aa82065f7630709154e5d4c0f66b07ed0aa647e21f042659c6f8e64800b580ddf41569bef36afa7c10ce4dd186ced7778bc84bc8dcd25321669609241e61e03ef3017fa1d9d0a335841392a8522b2b15b6dade11e81e2e33efa8a6228ee29d495de1da528e63b6be514126e892e0a85771a8085a43da3c40a62992ea9e0270fc495c0fbe8f2a60674404c573d7d239df8e299f09dbd5fb111a89fb3461e467905563f63f254953062f7cf82ab404caa438752e8a9cfbc249b8fbabf"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) [ 1031.840428][T32611] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1031.915422][T32611] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1031.979929][T32611] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1031.995699][T32617] loop3: p1 p2 p3 p4 [ 1031.999930][T32617] loop3: partition table partially beyond EOD, truncated [ 1032.007739][T32617] loop3: p1 start 6291466 is beyond EOD, truncated [ 1032.014497][T32617] loop3: p2 start 25 is beyond EOD, truncated [ 1032.020638][T32617] loop3: p3 start 10 is beyond EOD, truncated [ 1032.027079][T32617] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2eb, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:32 executing program 5: perf_event_open(&(0x7f0000002640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1032.392929][T32630] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1032.401583][T32630] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1032.419430][T32617] loop3: p1 p2 p3 p4 [ 1032.423479][T32617] loop3: partition table partially beyond EOD, truncated [ 1032.431269][T32617] loop3: p1 start 6291466 is beyond EOD, truncated [ 1032.437987][T32617] loop3: p2 start 25 is beyond EOD, truncated [ 1032.444255][T32617] loop3: p3 start 10 is beyond EOD, truncated [ 1032.450409][T32617] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ec, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:32 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffac010000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) [ 1032.996596][T32648] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1033.004985][T32648] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:32 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer\x00', 0x0, 0x0) [ 1033.185273][T32651] loop3: p1 p2 p3 p4 [ 1033.189492][T32651] loop3: partition table partially beyond EOD, truncated [ 1033.199337][T32651] loop3: p1 start 6294282 is beyond EOD, truncated [ 1033.206383][T32651] loop3: p2 start 25 is beyond EOD, truncated [ 1033.212526][T32651] loop3: p3 start 10 is beyond EOD, truncated [ 1033.218801][T32651] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1033.314083][T32655] loop2: p1 p2 p3 p4 [ 1033.318800][T32655] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ed, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1033.456316][T32655] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:33 executing program 4: memfd_create(&(0x7f00000000c0)='-\x00', 0x2) [ 1033.531822][T32655] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1033.576157][T32651] loop3: p1 p2 p3 p4 [ 1033.580409][T32651] loop3: partition table partially beyond EOD, truncated [ 1033.588224][T32651] loop3: p1 start 6294282 is beyond EOD, truncated [ 1033.595012][T32651] loop3: p2 start 25 is beyond EOD, truncated [ 1033.603378][T32651] loop3: p3 start 10 is beyond EOD, truncated [ 1033.610166][T32651] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:33 executing program 5: r0 = getpgid(0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) [ 1033.657647][T32655] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x802, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x8004, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$vsock(0xffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x301000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x7) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:26:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6100ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1033.905474][T32681] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1033.915734][T32681] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1033.949180][T32655] loop2: p1 p2 p3 p4 [ 1033.954126][T32655] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:33 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x220000) [ 1034.066579][T32655] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1034.127373][T32655] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1034.163181][T32655] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:34 executing program 5: bpf$MAP_DELETE_ELEM(0x9, &(0x7f00000026c0)={0xffffffffffffffff, 0x0}, 0x20) 13:26:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ee, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1034.407885][T32699] loop3: p1 p2 p3 p4 [ 1034.412116][T32699] loop3: partition table partially beyond EOD, truncated [ 1034.422228][T32699] loop3: p1 start 6359818 is beyond EOD, truncated [ 1034.429410][T32699] loop3: p2 start 25 is beyond EOD, truncated [ 1034.435748][T32699] loop3: p3 start 10 is beyond EOD, truncated [ 1034.441884][T32699] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffc8070000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:34 executing program 4: mq_open(&(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) [ 1034.587878][T32699] loop3: p1 p2 p3 p4 [ 1034.592026][T32699] loop3: partition table partially beyond EOD, truncated [ 1034.599992][T32699] loop3: p1 start 6359818 is beyond EOD, truncated [ 1034.606868][T32699] loop3: p2 start 25 is beyond EOD, truncated [ 1034.613010][T32699] loop3: p3 start 10 is beyond EOD, truncated [ 1034.619334][T32699] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1034.769088][T32714] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1034.777502][T32714] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:34 executing program 5: unshare(0x44000080) socket(0x1a, 0x4, 0x200) uname(&(0x7f0000000100)=""/233) 13:26:34 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x400880, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) tee(r7, r8, 0x101, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r6, 0x30, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6, 0x6}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:34 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6510, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) 13:26:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ef, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1035.146817][T32718] loop2: p1 p2 p3 p4 [ 1035.151447][T32718] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1035.225243][T32718] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1035.227917][T32722] IPVS: ftp: loaded support on port[0] = 21 [ 1035.344736][T32718] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1035.395622][T32722] IPVS: ftp: loaded support on port[0] = 21 [ 1035.456133][T32718] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1035.621813][ T8276] tipc: TX() has been purged, node left! [ 1035.697438][ T315] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1035.707465][ T315] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1035.739083][ T312] loop3: p1 p2 p3 p4 [ 1035.743295][ T312] loop3: partition table partially beyond EOD, truncated [ 1035.753304][ T312] loop3: p1 start 6425354 is beyond EOD, truncated [ 1035.760449][ T312] loop3: p2 start 25 is beyond EOD, truncated [ 1035.766671][ T312] loop3: p3 start 10 is beyond EOD, truncated [ 1035.772820][ T312] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:35 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) dup2(r0, r1) [ 1035.906068][ T312] loop3: p1 p2 p3 p4 [ 1035.910147][ T312] loop3: partition table partially beyond EOD, truncated [ 1035.918061][ T312] loop3: p1 start 6425354 is beyond EOD, truncated [ 1035.924935][ T312] loop3: p2 start 25 is beyond EOD, truncated [ 1035.931074][ T312] loop3: p3 start 10 is beyond EOD, truncated [ 1035.937419][ T312] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:35 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffcd070000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f0, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:35 executing program 5: unshare(0x44000080) socket(0x1a, 0x4, 0x200) uname(&(0x7f0000000100)=""/233) 13:26:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000180)={0xec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xeb0, 0x3, 0x0, 0x1, [{0x4}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "df7cb41aa6ddf9133fef2e31ca2e671a6a3263e3456fb2697a927170c95d5aba428e3b864caffbd2252a326de03700e1553e330d4ca440f51cd153cc82ff0a699693adada593d0dae57a820a6761bae17ec6e211e985df48511924ec6ee904215d917ad8b669fec766d553ddf6815d2d8962fe8179338425121ec6768c3925da6e560750c2dbcf8b5e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "303eeb8634169e549d0672be95ea3f01f7089c14abd96d5179e08c2f19757983936ebe2c755b1021a43d1c54441c2222dd43e1c9cd1bf7e594a0b060efcb493d4f96e9094c1fa55475430fe51b0fe935da1baf30b528e3ab0cf0a0d80fc44223f8dbbeaeed4ca6692ab6710867dacabc9ed884c689c0b3eae0496880845458fc7badce2b24110793557b307394c0c66ac51000139ccfe61e6e0336fb9efa39b7ac3b67ad2c5ca3d00d8b0058a125f7735d9cc5c5870f5b4a6acfad7e054d64455e3324c004d097d06d"}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x478, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x55, 0x1, "d14568ae7a671f5295c45a037bdd5f01af7acec0ccb202386605a8ae41c2726560eb8df7e1c3f4af9bd91999a14fbe1c62244201a98a5be7966582b3bac6f0f90ffa3daaaa13e3f25944e0cc5982efec6a"}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "0a353a78d6dcdc4077dc5f07a6d39ab97070ffa3bcfaa0171301906d88fb9d2b1702ac7f2c8788b9bd7fd5439c80e78eec961f1dae24f990f0013c824feadac538feefe71dee4ad5dc9adb7cb8d2e71b3e724529e9b9fe3b7c0bf830aeb38c67767349b33aab1e2ee4a8da7af778902dbd8295b51294e004c224d27461"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "5ed225c0cd5144a9a5495f87113959df71c24f23c911539d2d100eea92bd3464a5"}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "2bf1223f4bc344e2258e1e1bf06bf939893db848ccef0be9b7febbc0821c62723e821d5d0ee5ffd609d2bd80f3f20f435b328f9a9a314524a550c5de3a2a8708cbe825581f455cc5cb355c8254a2c6de827893f8382a14acd4c8fb3399fbb1c7e7e8caee2fbe8357b8b88cf0d8e795bb4939ef2b3a24513116f8b0dfebaf9f4c485a3a52ec9bc8da29ff21dbebf6a71f0f09159793ecc9cb083eb59bcd7eead20083ffe927e79dfabeaec7b4d8bf937c004c3f2c971d808663f6f76c15839e5cb9fe8d1fe7"}, @NFTA_DATA_VALUE={0x21, 0x1, "b310964f8f099285479d18d9b5ffb119b709abc3eea77a162b93756dd9"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x51, 0x1, "003664e051be80d9f0a3730d3e105434865cdc19f581c7aaa6590b8ccf343a81467693383c119ea1a5988edf71410c5e415401741f06d22932b92f68665511513938060f15f70313f13fd0c051"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "2d12a53a31a6f476a567181fb2c51038aa00ca5c76c6b139f996ec7e7faf8771e0a51dcf024b479c67ab2a9b1e"}, @NFTA_DATA_VALUE={0xc5, 0x1, "e545e146dbbc9d4ca01b7c6abc6237b58cb77c1938f182dc7879c390c0c4a8110964b23d812e7cf47728539845103c50e8d1dfc3b00288e3f1fe966a4b24b6e4b4d9ec37fafa1bd8fec933f227c61c61238ce80cac3c862516002d9ddd73e9b5605cc5c56026e28d29a9dd900bd1a7553b0b89ddbbf9b6a7dfa7262f7587912c8dd0841b28a21169ea02c3c1a5ad79324bea093489fb657368b5dffc80f3c32fc3b37e4a6b7a969bf99dcd632aef8a27ed7ab185c8c750d4569514f414ce0ce5ae"}]}]}, {0x778, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "9481277386bdac19505c8bf2deda97b3fa973c84e990b3abfd3a4c57d49357aa5fadeac17dd4496ede45f5385dd55cf2232f3222f5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "b88f01d61b0b56a99b1c428b162fa886753af54c9eb411757cce0bead034a4c00824813f81bc6e8dcee30935a3a96aee88c187c60ae39e7e660348a7dd84f228d63a9d0b2bef504759af892a3ee0f3157d568930ec3abf2e7065de81e1a564e8d1b93b80f0676bae990216c7873837e7d375edbeaf59bbfed40796f9ae2f8a4938a757c2ee338b04c8bba9b9fc51e45661fb2c98766976253ba49ac53e9127ca040d75898ec2c010b5bf3bfab5da5883d6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "355f3a104b81c821cf8744bfc16c966df1bd66ca2c72a25435e2886d1ac6b662d2886fe28c9e1f048ff2394639e3075602674ef7ab4a0062f9873d051860d127529c323ed16bed27a23fd53aac776b7ae4cfd578611e21a5a7b7e54f9d56fe2eb7d75df39535af413f0d90f2f13f3f9048ff848e97486cab8a83f4f4a26190bcfbf1486993b9bea72e5f675c5a061a4b80ded7267618ffe4b0f24beee620890dd93dbf8dc3201d22b231e0d655be5b5c2ae8c090b63b36bfdc5f8bf4f3979d76097446d97d100f514bef4d97a4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x49, 0x1, "e74be9c5fc3c896bd440104539f2bf0d3423479bd33fabcf153887c45870745173720a8460727935214cdeeac583cbe83ddef3a2be7c529a8118a0504a8b1975e2e34d2b89"}]}, @NFTA_SET_ELEM_KEY={0x428, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x3f1, 0x1, "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"}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "13599c4a620268f5f29374e27d2b4abb67a91ed140214aa82065f7630709154e5d4c0f66b07ed0aa647e21f042659c6f8e64800b580ddf41569bef36afa7c10ce4dd186ced7778bc84bc8dcd25321669609241e61e03ef3017fa1d9d0a335841392a8522b2b15b6dade11e81e2e33efa8a6228ee29d495de1da528e63b6be514126e892e0a85771a8085a43da3c40a62992ea9e0270fc495c0fbe8f2a60674404c573d7d239df8e299f09dbd5fb111a89fb3461e467905563f63f254953062f7cf82ab404caa438752"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}]}, 0xec4}}, 0x8000) [ 1036.427544][ T328] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1036.436037][ T328] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1036.474759][ T330] IPVS: ftp: loaded support on port[0] = 21 13:26:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006300ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1036.541832][ T329] loop2: p1 p2 p3 p4 [ 1036.546732][ T329] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1036.616252][ T329] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1036.687840][ T329] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1036.844138][ T329] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:36 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x24000, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f00000000c0)) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000080)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f1, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1037.039943][ T329] loop2: p1 p2 p3 p4 [ 1037.044764][ T329] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1037.186813][ T329] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:37 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x3a3143, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1037.255961][ T369] loop3: p1 p2 p3 p4 [ 1037.260194][ T369] loop3: partition table partially beyond EOD, truncated [ 1037.268154][ T369] loop3: p1 start 6488074 is beyond EOD, truncated [ 1037.274948][ T369] loop3: p2 start 25 is beyond EOD, truncated [ 1037.281088][ T369] loop3: p3 start 10 is beyond EOD, truncated [ 1037.282920][ T373] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1037.289427][ T369] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1037.306406][ T373] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6300ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1037.383989][ T329] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1037.525292][ T329] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:37 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xb9359a9fb530dc7b) syz_80211_join_ibss(&(0x7f0000002ac0)='wlan0\x00', &(0x7f0000002c40)=@default_ap_ssid, 0x6, 0x0) [ 1037.915811][ T385] loop3: p1 p2 p3 p4 [ 1037.919941][ T385] loop3: partition table partially beyond EOD, truncated [ 1037.927900][ T385] loop3: p1 start 6490890 is beyond EOD, truncated [ 1037.934782][ T385] loop3: p2 start 25 is beyond EOD, truncated [ 1037.940920][ T385] loop3: p3 start 10 is beyond EOD, truncated [ 1037.947279][ T385] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0\x00', 0x1fffffe, 0x0, 0x0, 0x20000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:37 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff7d230000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f2, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1038.068342][ T385] loop3: p1 p2 p3 p4 [ 1038.072515][ T385] loop3: partition table partially beyond EOD, truncated [ 1038.080364][ T385] loop3: p1 start 6490890 is beyond EOD, truncated [ 1038.087415][ T385] loop3: p2 start 25 is beyond EOD, truncated [ 1038.093754][ T385] loop3: p3 start 10 is beyond EOD, truncated [ 1038.099899][ T385] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:38 executing program 4: bpf$MAP_DELETE_ELEM(0xd, &(0x7f00000026c0)={0xffffffffffffffff, 0x0}, 0x20) [ 1038.425324][ T401] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1038.433723][ T401] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1038.508691][ T402] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x220000, 0x0) 13:26:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f3, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d7000/0x1000)=nil, 0x1000}, 0x0) syz_io_uring_complete(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x40007) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) r7 = syz_mount_image$udf(0x0, &(0x7f0000000180)='./file1\x00', 0x808000, 0x0, 0x0, 0x2312038, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4014f50b, &(0x7f0000000100)={0x1, 0x200, 0x4a94}) r8 = fcntl$dupfd(r0, 0x406, r7) ioctl$SNDCTL_TMR_METRONOME(r8, 0x40045407) [ 1038.879851][ T411] loop2: p1 p2 p3 p4 [ 1038.884735][ T411] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1038.903226][ T411] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1038.961701][ T416] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1038.970191][ T416] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.005322][ T411] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1039.048132][ T411] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:38 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x8, 0x10, 0x0}, 0x78) 13:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f4, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1039.175647][ T422] loop3: p1 p2 p3 p4 [ 1039.179864][ T422] loop3: partition table partially beyond EOD, truncated [ 1039.187703][ T422] loop3: p1 start 6556426 is beyond EOD, truncated [ 1039.194486][ T422] loop3: p2 start 25 is beyond EOD, truncated [ 1039.200638][ T422] loop3: p3 start 10 is beyond EOD, truncated [ 1039.206952][ T422] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:39 executing program 5: clock_gettime(0x6, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf267}}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000380)={0x2800080, 0x0, &(0x7f0000000140), 0x0, {}, &(0x7f00000001c0)=""/119, 0x77, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x35ea, &(0x7f0000002540)={0x0, 0x0, 0x1, 0x0, 0x6b}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f00000025c0), &(0x7f0000002600)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) openat$nvram(0xffffffffffffff9c, &(0x7f0000006880)='/dev/nvram\x00', 0x0, 0x0) [ 1039.418380][ T411] loop2: p1 p2 p3 p4 [ 1039.423121][ T411] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1039.498106][ T411] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1039.549662][ T411] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1039.585171][ T411] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1039.771502][ T454] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1039.780171][ T454] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:39 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff7e230000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:39 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x8080, 0x0) 13:26:39 executing program 4: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x64202) 13:26:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f5, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1040.195705][ T461] loop3: p1 p2 p3 p4 [ 1040.199953][ T461] loop3: partition table partially beyond EOD, truncated [ 1040.208367][ T461] loop3: p1 start 6621962 is beyond EOD, truncated [ 1040.215178][ T461] loop3: p2 start 25 is beyond EOD, truncated [ 1040.221325][ T461] loop3: p3 start 10 is beyond EOD, truncated [ 1040.227645][ T461] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:40 executing program 5: request_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffffd) [ 1040.348007][ T461] loop3: p1 p2 p3 p4 [ 1040.352157][ T461] loop3: partition table partially beyond EOD, truncated [ 1040.361823][ T461] loop3: p1 start 6621962 is beyond EOD, truncated [ 1040.368967][ T461] loop3: p2 start 25 is beyond EOD, truncated [ 1040.375249][ T461] loop3: p3 start 10 is beyond EOD, truncated [ 1040.381408][ T461] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1040.390099][ T8276] tipc: TX() has been purged, node left! [ 1040.423255][ T8276] tipc: TX() has been purged, node left! [ 1040.501597][ T471] loop2: p1 p2 p3 p4 [ 1040.507296][ T471] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80800) connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000180), 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffc, 0x0, 0x0, 0x400, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1040.647943][ T471] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1040.694601][ T471] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1040.718366][ T471] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1040.801765][ T481] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1040.810280][ T481] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b6600ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1041.094191][ T471] loop2: p1 p2 p3 p4 [ 1041.098872][ T471] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1041.294784][ T471] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f6, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:41 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='GPL\x00', 0x3, 0xae, &(0x7f0000000080)=""/174, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1041.329767][ T493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1041.394450][ T471] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1041.431342][ T471] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:41 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400)='/dev/nvram\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 13:26:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0xc461, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="32bb085ca9e20d66c02c82a5bbebdb6f1979f972628d93d8e678444e1ce4d6bbeb474dc8ae9e9bca5d64daf118d2a6e15a3749d2f56eea72f5251eec7f6954a5697332c8fbb309e3d1343f6234446c0153cc8ec11d3e51d59161591477ed973240746617e61382d2775139b91388c583e6db82c86f771ac74ce9af1ebcf4791fe8ca878487d82808724b838cbce227a580da9285096a510fa8f2df58d7016e6fda0c03a7c55899af375d15aaae23392dd57423bda97766178cb0b89d1293d0e386838ce929416d98394ba6b03392ae91701fab5783debf77bcb156abf3094d298d6da94befa22f16b77d", 0xea, 0x1}, {&(0x7f0000000100)="fe2880a10415a196d731ab1df3bd10b7b529f0e3c396cadbd820ece352839f4f9e16e28f701c1acdf7", 0x29, 0x5}], 0x1802420, &(0x7f00000002c0)={[{@fmask={'fmask', 0x3d, 0x200000000}}, {@uid={'uid'}}], [{@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, '++{'}}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:41 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff7f230000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1041.789390][ T508] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1041.799866][ T508] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.829328][ T506] loop3: p1 p2 p3 p4 [ 1041.833468][ T506] loop3: partition table partially beyond EOD, truncated [ 1041.841414][ T506] loop3: p1 start 6687498 is beyond EOD, truncated [ 1041.848274][ T506] loop3: p2 start 25 is beyond EOD, truncated [ 1041.854630][ T506] loop3: p3 start 10 is beyond EOD, truncated [ 1041.860783][ T506] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1041.985259][ T506] loop3: p1 p2 p3 p4 [ 1041.989333][ T506] loop3: partition table partially beyond EOD, truncated [ 1041.999496][ T506] loop3: p1 start 6687498 is beyond EOD, truncated [ 1042.006546][ T506] loop3: p2 start 25 is beyond EOD, truncated [ 1042.012738][ T506] loop3: p3 start 10 is beyond EOD, truncated [ 1042.018983][ T506] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:41 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffffc}, &(0x7f0000000040)) 13:26:41 executing program 5: bpf$MAP_DELETE_ELEM(0x21, &(0x7f00000026c0)={0xffffffffffffffff, 0x0}, 0x20) 13:26:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f7, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1042.340030][ T521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1042.538416][ T531] loop2: p1 p2 p3 p4 [ 1042.543887][ T531] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1042.553144][ T531] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1042.562380][ T531] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1042.572635][ T531] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:42 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x8}}, 0x10) 13:26:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/40, 0x28}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x39) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1042.729500][ T531] loop2: p1 p2 p3 p4 [ 1042.734792][ T531] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1042.751445][ T531] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1042.761385][ T531] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1042.773777][ T531] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1042.878914][ T554] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1042.887541][ T554] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:42 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff80230000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x9, 0x800000003, 0x3) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25110000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003009384cb00640001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020069705f7674693000000000000000000014000200626f6e645f736c6176655f3100000000140002007665746830c4746f5f7465616d0000000c00018008000100", @ANYRES32=r9, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x814) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1043.136354][ T557] loop3: p1 p2 p3 p4 [ 1043.140531][ T557] loop3: partition table partially beyond EOD, truncated [ 1043.148638][ T557] loop3: p1 start 6815754 is beyond EOD, truncated [ 1043.155451][ T557] loop3: p2 start 25 is beyond EOD, truncated [ 1043.161622][ T557] loop3: p3 start 10 is beyond EOD, truncated [ 1043.167940][ T557] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1043.326256][ T567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f8, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1043.526949][ T557] loop3: p1 p2 p3 p4 [ 1043.531215][ T557] loop3: partition table partially beyond EOD, truncated [ 1043.541545][ T557] loop3: p1 start 6815754 is beyond EOD, truncated [ 1043.548237][ T557] loop3: p2 start 25 is beyond EOD, truncated [ 1043.554463][ T557] loop3: p3 start 10 is beyond EOD, truncated [ 1043.560756][ T557] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1043.651206][ T580] loop2: p1 p2 p3 p4 [ 1043.656167][ T580] loop2: p1 size 78398975 extends beyond EOD, truncated 13:26:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1043.758566][ T580] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1043.798503][ T586] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1043.806976][ T586] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1043.878118][ T580] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:43 executing program 5: ustat(0x1, &(0x7f0000000040)) 13:26:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000080)={0x0, 0x8612, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1043.942076][ T580] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2f9, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1044.388987][ T580] loop2: p1 p2 p3 p4 [ 1044.393934][ T580] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1044.431988][ T580] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1044.515168][ T580] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1044.574149][ T580] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1044.748113][ T610] loop3: p1 p2 p3 p4 [ 1044.752364][ T610] loop3: partition table partially beyond EOD, truncated [ 1044.760135][ T610] loop3: p1 start 7077898 is beyond EOD, truncated [ 1044.768935][ T610] loop3: p2 start 25 is beyond EOD, truncated [ 1044.775614][ T610] loop3: p3 start 10 is beyond EOD, truncated [ 1044.781772][ T610] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1044.846219][ T619] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1044.855210][ T619] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1044.885642][ T610] loop3: p1 p2 p3 p4 13:26:44 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1044.889889][ T610] loop3: partition table partially beyond EOD, truncated [ 1044.897656][ T610] loop3: p1 start 7077898 is beyond EOD, truncated [ 1044.904433][ T610] loop3: p2 start 25 is beyond EOD, truncated [ 1044.910582][ T610] loop3: p3 start 10 is beyond EOD, truncated [ 1044.917143][ T610] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fa, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:44 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff2d290000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:26:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x432200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='batadv_slave_1\x00') [ 1045.263692][ T628] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1045.271967][ T628] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a007400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fb, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 1045.781410][ T634] loop2: p1 p2 p3 p4 [ 1045.786286][ T634] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1045.926113][ T634] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1046.054484][ T634] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1046.109129][ T634] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1046.188896][ T651] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1046.198998][ T651] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.227931][ T648] loop3: p1 p2 p3 p4 [ 1046.232013][ T648] loop3: partition table partially beyond EOD, truncated [ 1046.239885][ T648] loop3: p1 start 7602186 is beyond EOD, truncated [ 1046.246604][ T648] loop3: p2 start 25 is beyond EOD, truncated [ 1046.252778][ T648] loop3: p3 start 10 is beyond EOD, truncated [ 1046.259099][ T648] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@int=0xb1e, 0x4) 13:26:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fc, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1046.512363][ T648] loop3: p1 p2 p3 p4 [ 1046.516772][ T648] loop3: partition table partially beyond EOD, truncated [ 1046.524603][ T648] loop3: p1 start 7602186 is beyond EOD, truncated [ 1046.531190][ T648] loop3: p2 start 25 is beyond EOD, truncated [ 1046.537544][ T648] loop3: p3 start 10 is beyond EOD, truncated [ 1046.543889][ T648] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:46 executing program 5: socketpair(0x6, 0x0, 0x0, &(0x7f00000000c0)) 13:26:46 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffab290000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:26:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4b7800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fd, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1047.091569][ T667] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x20001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1047.507163][ T678] loop2: p1 p2 p3 p4 [ 1047.511751][ T678] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1047.525953][ T678] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1047.542979][ T678] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1047.555660][ T678] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1047.577066][ T680] loop3: p1 p2 p3 p4 [ 1047.581141][ T680] loop3: partition table partially beyond EOD, truncated [ 1047.588864][ T680] loop3: p1 start 7883530 is beyond EOD, truncated [ 1047.595649][ T680] loop3: p2 start 25 is beyond EOD, truncated 13:26:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fe, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1047.601792][ T680] loop3: p3 start 10 is beyond EOD, truncated [ 1047.608159][ T680] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1047.743247][ T678] loop2: p1 p2 p3 p4 [ 1047.748325][ T678] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1047.764259][ T678] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1047.783212][ T678] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1047.875309][ T678] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1048.017197][ T704] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1048.025808][ T704] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0xffffffd6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'lc\x00', 0x8, 0x0, 0x13}, 0x2c) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1048.076261][ T680] loop3: p1 p2 p3 p4 [ 1048.080432][ T680] loop3: partition table partially beyond EOD, truncated [ 1048.088533][ T680] loop3: p1 start 7883530 is beyond EOD, truncated [ 1048.095548][ T680] loop3: p2 start 25 is beyond EOD, truncated [ 1048.101699][ T680] loop3: p3 start 10 is beyond EOD, truncated [ 1048.108163][ T680] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:48 executing program 5: bpf$MAP_DELETE_ELEM(0x10, 0x0, 0x0) 13:26:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2ff, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:48 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff00080400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1048.533304][ T716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a007a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1048.609717][ T722] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1048.618082][ T722] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:48 executing program 5: syz_io_uring_setup(0x5e3a, &(0x7f00000001c0)={0x0, 0x0, 0x21}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 1048.860373][ T727] loop2: p1 p2 p3 p4 [ 1048.864718][ T727] loop2: partition table partially beyond EOD, truncated [ 1048.872399][ T727] loop2: p1 start 264192 is beyond EOD, truncated [ 1048.879274][ T727] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1049.040294][ T727] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1049.052853][ T727] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1049.220658][ T737] loop3: p1 p2 p3 p4 [ 1049.225214][ T737] loop3: partition table partially beyond EOD, truncated [ 1049.232797][ T737] loop3: p1 start 7995402 is beyond EOD, truncated [ 1049.239748][ T737] loop3: p2 start 25 is beyond EOD, truncated [ 1049.246103][ T737] loop3: p3 start 10 is beyond EOD, truncated [ 1049.252329][ T737] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000180)={0xec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xeb0, 0x3, 0x0, 0x1, [{0x4}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "df7cb41aa6ddf9133fef2e31ca2e671a6a3263e3456fb2697a927170c95d5aba428e3b864caffbd2252a326de03700e1553e330d4ca440f51cd153cc82ff0a699693adada593d0dae57a820a6761bae17ec6e211e985df48511924ec6ee904215d917ad8b669fec766d553ddf6815d2d8962fe8179338425121ec6768c3925da6e560750c2dbcf8b5e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "303eeb8634169e549d0672be95ea3f01f7089c14abd96d5179e08c2f19757983936ebe2c755b1021a43d1c54441c2222dd43e1c9cd1bf7e594a0b060efcb493d4f96e9094c1fa55475430fe51b0fe935da1baf30b528e3ab0cf0a0d80fc44223f8dbbeaeed4ca6692ab6710867dacabc9ed884c689c0b3eae0496880845458fc7badce2b24110793557b307394c0c66ac51000139ccfe61e6e0336fb9efa39b7ac3b67ad2c5ca3d00d8b0058a125f7735d9cc5c5870f5b4a6acfad7e054d64455e3324c004d097d06d"}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x478, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x55, 0x1, "d14568ae7a671f5295c45a037bdd5f01af7acec0ccb202386605a8ae41c2726560eb8df7e1c3f4af9bd91999a14fbe1c62244201a98a5be7966582b3bac6f0f90ffa3daaaa13e3f25944e0cc5982efec6a"}]}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "0a353a78d6dcdc4077dc5f07a6d39ab97070ffa3bcfaa0171301906d88fb9d2b1702ac7f2c8788b9bd7fd5439c80e78eec961f1dae24f990f0013c824feadac538feefe71dee4ad5dc9adb7cb8d2e71b3e724529e9b9fe3b7c0bf830aeb38c67767349b33aab1e2ee4a8da7af778902dbd8295b51294e004c224d2746135"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "5ed225c0cd5144a9a5495f87113959df71c24f23c911539d2d100eea92bd3464a5"}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "2bf1223f4bc344e2258e1e1bf06bf939893db848ccef0be9b7febbc0821c62723e821d5d0ee5ffd609d2bd80f3f20f435b328f9a9a314524a550c5de3a2a8708cbe825581f455cc5cb355c8254a2c6de827893f8382a14acd4c8fb3399fbb1c7e7e8caee2fbe8357b8b88cf0d8e795bb4939ef2b3a24513116f8b0dfebaf9f4c485a3a52ec9bc8da29ff21dbebf6a71f0f09159793ecc9cb083eb59bcd7eead20083ffe927e79dfabeaec7b4d8bf937c004c3f2c971d808663f6f76c15839e5cb9fe8d1fe7"}, @NFTA_DATA_VALUE={0x21, 0x1, "b310964f8f099285479d18d9b5ffb119b709abc3eea77a162b93756dd9"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x52, 0x1, "003664e051be80d9f0a3730d3e105434865cdc19f581c7aaa6590b8ccf343a81467693383c119ea1a5988edf71410c5e415401741f06d22932b92f68665511513938060f15f70313f13fd0c0512f"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "2d12a53a31a6f476a567181fb2c51038aa00ca5c76c6b139f996ec7e7faf8771e0a51dcf024b479c67ab2a9b1e"}, @NFTA_DATA_VALUE={0xc7, 0x1, "e545e146dbbc9d4ca01b7c6abc6237b58cb77c1938f182dc7879c390c0c4a8110964b23d812e7cf47728539845103c50e8d1dfc3b00288e3f1fe966a4b24b6e4b4d9ec37fafa1bd8fec933f227c61c61238ce80cac3c862516002d9ddd73e9b5605cc5c56026e28d29a9dd900bd1a7553b0b89ddbbf9b6a7dfa7262f7587912c8dd0841b28a21169ea02c3c1a5ad79324bea093489fb657368b5dffc80f3c32fc3b37e4a6b7a969bf99dcd632aef8a27ed7ab185c8c750d4569514f414ce0ce5aebfc4"}]}]}, {0x778, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "9481277386bdac19505c8bf2deda97b3fa973c84e990b3abfd3a4c57d49357aa5fadeac17dd4496ede45f5385dd55cf2232f3222f5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "b88f01d61b0b56a99b1c428b162fa886753af54c9eb411757cce0bead034a4c00824813f81bc6e8dcee30935a3a96aee88c187c60ae39e7e660348a7dd84f228d63a9d0b2bef504759af892a3ee0f3157d568930ec3abf2e7065de81e1a564e8d1b93b80f0676bae990216c7873837e7d375edbeaf59bbfed40796f9ae2f8a4938a757c2ee338b04c8bba9b9fc51e45661fb2c98766976253ba49ac53e9127ca040d75898ec2c010b5bf3bfab5da5883d6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "355f3a104b81c821cf8744bfc16c966df1bd66ca2c72a25435e2886d1ac6b662d2886fe28c9e1f048ff2394639e3075602674ef7ab4a0062f9873d051860d127529c323ed16bed27a23fd53aac776b7ae4cfd578611e21a5a7b7e54f9d56fe2eb7d75df39535af413f0d90f2f13f3f9048ff848e97486cab8a83f4f4a26190bcfbf1486993b9bea72e5f675c5a061a4b80ded7267618ffe4b0f24beee620890dd93dbf8dc3201d22b231e0d655be5b5c2ae8c090b63b36bfdc5f8bf4f3979d76097446d97d100f514bef4d97a4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x49, 0x1, "e74be9c5fc3c896bd440104539f2bf0d3423479bd33fabcf153887c45870745173720a8460727935214cdeeac583cbe83ddef3a2be7c529a8118a0504a8b1975e2e34d2b89"}]}, @NFTA_SET_ELEM_KEY={0x428, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x3f1, 0x1, "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"}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "13599c4a620268f5f29374e27d2b4abb67a91ed140214aa82065f7630709154e5d4c0f66b07ed0aa647e21f042659c6f8e64800b580ddf41569bef36afa7c10ce4dd186ced7778bc84bc8dcd25321669609241e61e03ef3017fa1d9d0a335841392a8522b2b15b6dade11e81e2e33efa8a6228ee29d495de1da528e63b6be514126e892e0a85771a8085a43da3c40a62992ea9e0270fc495c0fbe8f2a60674404c573d7d239df8e299f09dbd5fb111a89fb3461e467905563f63f254953062f7cf82ab404caa438752e8a9"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}]}, 0xec4}}, 0x0) 13:26:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) splice(r0, 0x0, r1, 0x0, 0x8000010003, 0x0) [ 1049.400776][ T737] loop3: p1 p2 p3 p4 [ 1049.405149][ T737] loop3: partition table partially beyond EOD, truncated [ 1049.412741][ T737] loop3: p1 start 7995402 is beyond EOD, truncated [ 1049.420116][ T737] loop3: p2 start 25 is beyond EOD, truncated [ 1049.426402][ T737] loop3: p3 start 10 is beyond EOD, truncated [ 1049.432548][ T737] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1049.542890][ T750] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1049.551469][ T750] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:49 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff4e8d0e00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a009000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000080)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:50 executing program 5: connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) [ 1050.379564][ T767] loop2: p1 p2 p3 p4 [ 1050.383776][ T767] loop2: partition table partially beyond EOD, truncated [ 1050.391393][ T767] loop2: p1 start 953678 is beyond EOD, truncated [ 1050.400171][ T767] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1050.561592][ T767] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1050.606409][ T775] loop3: p1 p2 p3 p4 [ 1050.610762][ T775] loop3: partition table partially beyond EOD, truncated [ 1050.618625][ T775] loop3: p1 start 9437194 is beyond EOD, truncated [ 1050.625394][ T775] loop3: p2 start 25 is beyond EOD, truncated [ 1050.632479][ T775] loop3: p3 start 10 is beyond EOD, truncated [ 1050.638784][ T775] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1050.670039][ T767] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1050.757700][ T775] loop3: p1 p2 p3 p4 [ 1050.761842][ T775] loop3: partition table partially beyond EOD, truncated [ 1050.770444][ T775] loop3: p1 start 9437194 is beyond EOD, truncated [ 1050.777242][ T775] loop3: p2 start 25 is beyond EOD, truncated [ 1050.783392][ T775] loop3: p3 start 10 is beyond EOD, truncated [ 1050.789730][ T775] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x302, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40186417, &(0x7f0000000080)={0xffff0003, 0x7fffffff, 0x6, 0x131a, 0x14, 0x9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) splice(r0, 0x0, r1, 0x0, 0x8000010003, 0x0) [ 1050.961871][ T767] loop2: p1 p2 p3 p4 [ 1050.966258][ T767] loop2: partition table partially beyond EOD, truncated [ 1050.974275][ T767] loop2: p1 start 953678 is beyond EOD, truncated [ 1050.980779][ T767] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1051.140704][ T796] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1051.149071][ T796] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.204580][ T767] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1051.245298][ T767] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4ab800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1051.377891][ T803] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x303, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:51 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff30a00e00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:52 executing program 5: [ 1052.391894][ T824] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1052.419616][ T828] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1052.428126][ T828] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x304, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1052.500967][ T825] loop2: p1 p2 p3 p4 [ 1052.505389][ T825] loop2: partition table partially beyond EOD, truncated [ 1052.513002][ T825] loop2: p1 start 958512 is beyond EOD, truncated [ 1052.519707][ T825] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1052.650975][ T832] loop3: p1 p2 p3 p4 [ 1052.655276][ T832] loop3: partition table partially beyond EOD, truncated [ 1052.663002][ T832] loop3: p1 start 12077578 is beyond EOD, truncated [ 1052.670149][ T832] loop3: p2 start 25 is beyond EOD, truncated [ 1052.676434][ T832] loop3: p3 start 10 is beyond EOD, truncated [ 1052.682586][ T832] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1052.768478][ T825] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) splice(r0, 0x0, r1, 0x0, 0x8000010003, 0x0) [ 1052.846422][ T825] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f00000000c0)=0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) socket$unix(0x1, 0x5, 0x0) r3 = openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x3a843, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f00000001c0)="7e371929c3420c316ab3776c982e7fc27396d407808db3a786bcfd2a82867d19ab26a984d1a65f", 0x27) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) openat$qrtrtun(0xffffff9c, &(0x7f0000000180)='/dev/qrtr-tun\x00', 0x402100) 13:26:52 executing program 5: [ 1053.031494][ T846] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1053.040160][ T846] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1053.157428][ T825] loop2: p1 p2 p3 p4 [ 1053.163731][ T825] loop2: partition table partially beyond EOD, truncated [ 1053.171802][ T825] loop2: p1 start 958512 is beyond EOD, truncated [ 1053.178479][ T825] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4bc400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1053.333425][ T825] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x305, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1053.380995][ T825] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:53 executing program 5: [ 1053.486929][ T860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1053.609376][ T860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:26:53 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff27eb0e00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1053.806812][ T871] loop3: p1 p2 p3 p4 [ 1053.810954][ T871] loop3: partition table partially beyond EOD, truncated [ 1053.818835][ T871] loop3: p1 start 12864266 is beyond EOD, truncated [ 1053.825782][ T871] loop3: p2 start 25 is beyond EOD, truncated [ 1053.831922][ T871] loop3: p3 start 10 is beyond EOD, truncated [ 1053.838263][ T871] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:53 executing program 5: 13:26:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) bind$ax25(r4, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f00000000c0)={0xffe0, 0x0, 0x62, 0x0, 0x2}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1053.985172][ T878] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1053.993484][ T878] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x306, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1054.154251][ T871] loop3: p1 p2 p3 p4 [ 1054.158435][ T871] loop3: partition table partially beyond EOD, truncated [ 1054.166334][ T871] loop3: p1 start 12864266 is beyond EOD, truncated [ 1054.173018][ T871] loop3: p2 start 25 is beyond EOD, truncated [ 1054.179379][ T871] loop3: p3 start 10 is beyond EOD, truncated [ 1054.187197][ T871] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1054.406915][ T887] loop2: p1 p2 p3 p4 [ 1054.411074][ T887] loop2: partition table partially beyond EOD, truncated [ 1054.418900][ T887] loop2: p1 start 977703 is beyond EOD, truncated [ 1054.426349][ T887] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1054.581512][ T887] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1054.591886][ T895] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1054.602604][ T895] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1054.636061][ T887] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:54 executing program 5: 13:26:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4bec00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1054.812640][ T887] loop2: p1 p2 p3 p4 [ 1054.816879][ T887] loop2: partition table partially beyond EOD, truncated [ 1054.824983][ T887] loop2: p1 start 977703 is beyond EOD, truncated [ 1054.831481][ T887] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x307, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1054.929981][ T887] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1054.947243][ T887] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1055.187193][ T911] loop3: p1 p2 p3 p4 [ 1055.191314][ T911] loop3: partition table partially beyond EOD, truncated [ 1055.199064][ T911] loop3: p1 start 15485706 is beyond EOD, truncated [ 1055.205920][ T911] loop3: p2 start 25 is beyond EOD, truncated [ 1055.214262][ T911] loop3: p3 start 10 is beyond EOD, truncated [ 1055.220402][ T911] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:55 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff681b0f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1055.326480][ T911] loop3: p1 p2 p3 p4 [ 1055.330550][ T911] loop3: partition table partially beyond EOD, truncated [ 1055.338610][ T911] loop3: p1 start 15485706 is beyond EOD, truncated [ 1055.342253][ T917] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1055.345438][ T911] loop3: p2 start 25 is beyond EOD, truncated [ 1055.345481][ T911] loop3: p3 start 10 is beyond EOD, truncated [ 1055.345526][ T911] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1055.373105][ T917] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:55 executing program 5: 13:26:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a4af800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x308, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1055.860102][ T928] loop2: p1 p2 p3 p4 [ 1055.864546][ T928] loop2: partition table partially beyond EOD, truncated [ 1055.872102][ T928] loop2: p1 start 990056 is beyond EOD, truncated [ 1055.878816][ T928] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1056.038635][ T928] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1056.081236][ T928] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1056.196359][ T938] loop3: p1 p2 p3 p4 [ 1056.200525][ T938] loop3: partition table partially beyond EOD, truncated [ 1056.208418][ T938] loop3: p1 start 16271882 is beyond EOD, truncated [ 1056.215340][ T938] loop3: p2 start 25 is beyond EOD, truncated [ 1056.221482][ T938] loop3: p3 start 10 is beyond EOD, truncated [ 1056.227781][ T938] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1056.331789][ T928] loop2: p1 p2 p3 p4 [ 1056.338195][ T928] loop2: partition table partially beyond EOD, truncated [ 1056.346659][ T928] loop2: p1 start 990056 is beyond EOD, truncated [ 1056.353152][ T928] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:56 executing program 5: [ 1056.384884][ T951] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1056.393302][ T951] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.566827][ T928] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1056.633500][ T928] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0fff00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x309, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x18, 0x0, 0x2}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:26:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:26:56 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fffff45ac04ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:57 executing program 5: [ 1057.207495][ T965] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1057.216124][ T965] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1057.267439][ T963] loop3: p1 p2 p3 p4 [ 1057.271700][ T963] loop3: partition table partially beyond EOD, truncated [ 1057.279738][ T963] loop3: p1 start 16715530 is beyond EOD, truncated [ 1057.286567][ T963] loop3: p2 start 25 is beyond EOD, truncated [ 1057.292737][ T963] loop3: p3 start 10 is beyond EOD, truncated [ 1057.299042][ T963] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:26:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1057.850580][ T981] loop2: p1 p2 p3 p4 [ 1057.855200][ T981] loop2: partition table partially beyond EOD, truncated [ 1057.862815][ T981] loop2: p1 start 78398975 is beyond EOD, truncated [ 1057.872195][ T981] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x20, 0x2}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1058.047879][ T981] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1058.120653][ T981] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1058.361454][ T992] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1058.369874][ T992] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.397512][ T981] loop2: p1 p2 p3 p4 [ 1058.401727][ T981] loop2: partition table partially beyond EOD, truncated 13:26:58 executing program 5: [ 1058.409579][ T981] loop2: p1 start 78398975 is beyond EOD, truncated [ 1058.416447][ T981] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1058.543050][ T981] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1058.561948][ T992] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1058.570361][ T992] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.583151][ T981] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:58 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff00000006ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) [ 1058.735374][ T997] loop3: p1 p2 p3 p4 [ 1058.739590][ T997] loop3: partition table partially beyond EOD, truncated [ 1058.747511][ T997] loop3: p1 start 131082 is beyond EOD, truncated [ 1058.754129][ T997] loop3: p2 start 25 is beyond EOD, truncated [ 1058.760296][ T997] loop3: p3 start 10 is beyond EOD, truncated [ 1058.766631][ T997] loop3: p4 start 3976200192 is beyond EOD, truncated 13:26:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:26:58 executing program 5: [ 1059.086811][ T997] loop3: p1 p2 p3 p4 [ 1059.090976][ T997] loop3: partition table partially beyond EOD, truncated [ 1059.100691][ T997] loop3: p1 start 131082 is beyond EOD, truncated [ 1059.107523][ T997] loop3: p2 start 25 is beyond EOD, truncated [ 1059.113777][ T997] loop3: p3 start 10 is beyond EOD, truncated [ 1059.119919][ T997] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1059.296900][ T1018] loop2: p1 p2 p3 p4 [ 1059.301112][ T1018] loop2: partition table partially beyond EOD, truncated [ 1059.310925][ T1018] loop2: p1 start 100663296 is beyond EOD, truncated [ 1059.318215][ T1018] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1059.327665][ T1018] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1059.337096][ T1018] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1059.344939][ T1021] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1059.353205][ T1021] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000300ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1059.547839][ T1018] loop2: p1 p2 p3 p4 [ 1059.551915][ T1018] loop2: partition table partially beyond EOD, truncated [ 1059.559942][ T1018] loop2: p1 start 100663296 is beyond EOD, truncated [ 1059.566865][ T1018] loop2: p2 size 100663296 extends beyond EOD, truncated 13:26:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1059.608988][ T1018] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1059.623105][ T1018] loop2: p4 start 3976200192 is beyond EOD, truncated 13:26:59 executing program 5: 13:26:59 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff87770072ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:26:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x1, @bcast, @bpq0='bpq0\x00', 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @bcast, @bcast, @default, @default]}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r3 = openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x802, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) 13:26:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1059.994499][ T1045] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1060.002779][ T1045] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:26:59 executing program 5: [ 1060.073839][ T1046] loop3: p1 p2 p3 p4 [ 1060.078062][ T1046] loop3: partition table partially beyond EOD, truncated [ 1060.085869][ T1046] loop3: p1 start 196618 is beyond EOD, truncated [ 1060.092361][ T1046] loop3: p2 start 25 is beyond EOD, truncated [ 1060.098718][ T1046] loop3: p3 start 10 is beyond EOD, truncated [ 1060.105029][ T1046] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1060.184818][ T1054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r3 = fanotify_init(0x10, 0x40000) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x9c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x1010, r3, 0xbe305000) 13:27:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1060.411071][ T1046] loop3: p1 p2 p3 p4 [ 1060.415402][ T1046] loop3: partition table partially beyond EOD, truncated [ 1060.422947][ T1046] loop3: p1 start 196618 is beyond EOD, truncated [ 1060.431659][ T1046] loop3: p2 start 25 is beyond EOD, truncated [ 1060.438216][ T1046] loop3: p3 start 10 is beyond EOD, truncated [ 1060.444701][ T1046] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1060.650908][ T1071] loop2: p1 p2 p3 p4 [ 1060.655331][ T1071] loop2: partition table partially beyond EOD, truncated [ 1060.662892][ T1071] loop2: p1 start 1912633223 is beyond EOD, truncated [ 1060.670697][ T1071] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1060.679720][ T1071] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1060.690481][ T1071] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1060.827188][ T1071] loop2: p1 p2 p3 p4 [ 1060.831331][ T1071] loop2: partition table partially beyond EOD, truncated [ 1060.841801][ T1071] loop2: p1 start 1912633223 is beyond EOD, truncated [ 1060.849164][ T1071] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1060.885042][ T1071] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1060.900510][ T1071] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:00 executing program 5: 13:27:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:00 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff000000edff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1061.070842][ T1095] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1061.079217][ T1095] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1061.357104][ T1100] loop3: p1 p2 p3 p4 [ 1061.361201][ T1100] loop3: partition table partially beyond EOD, truncated [ 1061.368954][ T1100] loop3: p1 start 262154 is beyond EOD, truncated [ 1061.375579][ T1100] loop3: p2 start 25 is beyond EOD, truncated [ 1061.381734][ T1100] loop3: p3 start 10 is beyond EOD, truncated [ 1061.388109][ T1100] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1061.518628][ T1100] loop3: p1 p2 p3 p4 [ 1061.522867][ T1100] loop3: partition table partially beyond EOD, truncated [ 1061.530617][ T1100] loop3: p1 start 262154 is beyond EOD, truncated [ 1061.537324][ T1100] loop3: p2 start 25 is beyond EOD, truncated [ 1061.543478][ T1100] loop3: p3 start 10 is beyond EOD, truncated [ 1061.549791][ T1100] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/202) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = openat$vcsu(0xffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x10840, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40047705, &(0x7f0000000100)={0x1b, 0x100}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x8001, 0x0) sendto$inet6(r4, &(0x7f0000000980)="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", 0x1000, 0x8, 0x0, 0x0) 13:27:01 executing program 5: 13:27:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1061.918632][ T1120] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1061.927373][ T1120] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1062.018288][ T1121] loop2: p1 p2 p3 p4 [ 1062.022470][ T1121] loop2: partition table partially beyond EOD, truncated [ 1062.030654][ T1121] loop2: p1 start 3976200192 is beyond EOD, truncated [ 1062.037662][ T1121] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1062.150559][ T1126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1062.192777][ T1121] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1062.242635][ T1121] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1062.307108][ T1132] loop3: p1 p2 p3 p4 [ 1062.311345][ T1132] loop3: partition table partially beyond EOD, truncated [ 1062.319101][ T1132] loop3: p1 start 327690 is beyond EOD, truncated [ 1062.325705][ T1132] loop3: p2 start 25 is beyond EOD, truncated [ 1062.331836][ T1132] loop3: p3 start 10 is beyond EOD, truncated [ 1062.338123][ T1132] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:02 executing program 5: 13:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x30f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1062.457127][ T1132] loop3: p1 p2 p3 p4 [ 1062.461269][ T1132] loop3: partition table partially beyond EOD, truncated [ 1062.469127][ T1132] loop3: p1 start 327690 is beyond EOD, truncated [ 1062.475754][ T1132] loop3: p2 start 25 is beyond EOD, truncated [ 1062.484052][ T1132] loop3: p3 start 10 is beyond EOD, truncated [ 1062.490208][ T1132] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1062.643318][ T1121] loop2: p1 p2 p3 p4 [ 1062.647709][ T1121] loop2: partition table partially beyond EOD, truncated [ 1062.655502][ T1121] loop2: p1 start 3976200192 is beyond EOD, truncated [ 1062.662348][ T1121] loop2: p2 size 100663296 extends beyond EOD, truncated 13:27:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x310, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1062.905870][ T1121] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1062.936858][ T1121] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000600ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:03 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a020000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:03 executing program 5: [ 1063.282471][ T1165] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1063.290865][ T1165] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1063.536896][ T1165] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1063.545342][ T1165] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1063.626084][ T1176] loop3: p1 p2 p3 p4 [ 1063.630180][ T1176] loop3: partition table partially beyond EOD, truncated [ 1063.638260][ T1176] loop3: p1 start 393226 is beyond EOD, truncated [ 1063.644938][ T1176] loop3: p2 start 25 is beyond EOD, truncated [ 1063.651088][ T1176] loop3: p3 start 10 is beyond EOD, truncated [ 1063.658011][ T1176] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1063.775788][ T1176] loop3: p1 p2 p3 p4 [ 1063.779895][ T1176] loop3: partition table partially beyond EOD, truncated [ 1063.787895][ T1176] loop3: p1 start 393226 is beyond EOD, truncated [ 1063.794580][ T1176] loop3: p2 start 25 is beyond EOD, truncated [ 1063.800729][ T1176] loop3: p3 start 10 is beyond EOD, truncated [ 1063.807067][ T1176] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:03 executing program 0: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)={0x428, 0x3f4, 0x10, 0x70bd28, 0x25dfdbfd, {0x6, 0x1, 0x2b, [0x7, 0x10001, 0x846, 0x81, 0xb86a, 0x46, 0x6c, 0x1ff, 0x9, 0x80000001, 0x4, 0x1, 0x4, 0x4, 0x3f, 0x8, 0x7, 0x7ff, 0xbd3, 0x4f, 0x0, 0x1e, 0x800, 0xebc7, 0x5, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x5, 0x3, 0x4, 0x400, 0x8, 0xff, 0x7, 0x9, 0x4, 0x8, 0x3, 0x63, 0x9, 0x5851, 0x401, 0x101, 0x8, 0xe58, 0x800, 0x6, 0x6, 0x3, 0x9, 0xffff8001, 0x240000, 0x7, 0x20, 0x101, 0x7, 0xffffffff, 0x4, 0x2, 0x4910, 0x5], [0x0, 0xaf6, 0x4, 0x422, 0x1, 0x101, 0x8, 0x4, 0x0, 0x7, 0x5f, 0x1, 0x2, 0x6, 0x401, 0x8001, 0x5f89, 0x4, 0x5, 0x7f, 0x8c, 0xfffe, 0x80, 0x0, 0x5, 0x9, 0xfffffffb, 0x1000, 0x8001, 0x7768, 0x7, 0xc2a6, 0xe20e, 0x1ff, 0x1, 0x8, 0x5, 0x3, 0x3, 0xedb2, 0x80, 0x4, 0xcd11, 0x6, 0x10000, 0x9, 0x5, 0xa059, 0x2, 0x4, 0x9, 0x6, 0x7f, 0x7, 0x1e, 0x10001, 0x4, 0x80000001, 0x9, 0x1, 0x10000, 0x3, 0x4, 0x80000001], [0x7, 0x7, 0x5, 0x4, 0xffff, 0x3, 0x1, 0x0, 0xff, 0x6, 0x7, 0x7, 0x30a2, 0x6, 0x3, 0x7ff, 0x20, 0x8, 0x6df, 0xffff, 0x7fffffff, 0xc44, 0x9, 0x2, 0x1ff, 0x10000, 0x6, 0xb44, 0x280000, 0x1, 0x4, 0x5, 0x6, 0x678, 0xffffff01, 0xe2, 0x100, 0x0, 0x5, 0x6, 0x9, 0x2, 0x3f, 0xfffffffa, 0x9, 0xae7, 0x7ea, 0x4, 0x1, 0x9, 0xffffffff, 0x7, 0x174b, 0x116, 0x2, 0x8, 0x3fff8, 0x400, 0x7, 0x6, 0x1000, 0x1, 0x8, 0x9], [0xe6e8, 0x5, 0x0, 0x1a, 0xffff4622, 0x9, 0x6a, 0x8, 0x81, 0x0, 0x19, 0x10000, 0x8, 0x2, 0x1346, 0x371, 0x2, 0x9, 0x3ff, 0x9, 0x6, 0x7, 0x655, 0x3, 0x9, 0x9d25, 0x6, 0xf5, 0x3, 0xfff, 0x81, 0x800, 0x3, 0x200, 0x3fe, 0x9, 0x2, 0x9, 0x6, 0x3, 0x1, 0x3, 0xb4e, 0x9a3, 0x200, 0x79, 0xbb1, 0x2, 0x1, 0x8001, 0xffffffff, 0xffffff68, 0xf6f, 0x2, 0x80, 0x75db, 0x8ab8, 0x1, 0x4, 0x4, 0x10000, 0x3, 0x70c, 0x8], 0x7, ['%+\x9a\x00', '\x00', '[\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x8040}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1063.889965][ T1186] loop2: p1 p2 p3 p4 [ 1063.894808][ T1186] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x311, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1064.007375][ T1186] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1064.033963][ T1191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1064.086110][ T1186] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:27:03 executing program 5: [ 1064.128547][ T1191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1064.171100][ T1186] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1064.332615][ T1186] loop2: p1 p2 p3 p4 [ 1064.337281][ T1186] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000080)={@fixed={[], 0x12}, 0xff, 0x8, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000700ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1064.492064][ T1186] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1064.516790][ T1186] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1064.589193][ T1213] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1064.597722][ T1213] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1064.600420][ T1186] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:04 executing program 5: 13:27:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x312, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1065.073317][ T1218] loop3: p1 p2 p3 p4 [ 1065.077626][ T1218] loop3: partition table partially beyond EOD, truncated [ 1065.085879][ T1218] loop3: p1 start 458762 is beyond EOD, truncated [ 1065.092369][ T1218] loop3: p2 start 25 is beyond EOD, truncated [ 1065.098759][ T1218] loop3: p3 start 10 is beyond EOD, truncated [ 1065.105103][ T1218] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:05 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a030000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1065.147837][ T1220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1065.544366][ T1218] loop3: p1 p2 p3 p4 [ 1065.548543][ T1218] loop3: partition table partially beyond EOD, truncated [ 1065.558692][ T1218] loop3: p1 start 458762 is beyond EOD, truncated [ 1065.565670][ T1218] loop3: p2 start 25 is beyond EOD, truncated [ 1065.571825][ T1218] loop3: p3 start 10 is beyond EOD, truncated [ 1065.578134][ T1218] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1065.644103][ T1242] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1065.652431][ T1242] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1065.740324][ T1241] loop2: p1 p2 p3 p4 [ 1065.745179][ T1241] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1065.841582][ T1241] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1065.904203][ T1241] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1065.971983][ T1241] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1066.207982][ T1241] loop2: p1 p2 p3 p4 [ 1066.212647][ T1241] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1066.237463][ T1241] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1066.253393][ T1241] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:27:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:06 executing program 5: 13:27:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3fc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40004) 13:27:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x313, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:06 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1066.290032][ T1241] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1066.465763][ T1261] loop3: p1 p2 p3 p4 [ 1066.469931][ T1261] loop3: partition table partially beyond EOD, truncated [ 1066.479222][ T1261] loop3: p1 start 524298 is beyond EOD, truncated [ 1066.486282][ T1261] loop3: p2 start 25 is beyond EOD, truncated [ 1066.492430][ T1261] loop3: p3 start 10 is beyond EOD, truncated [ 1066.498727][ T1261] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:06 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a040000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1066.632556][ T1269] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1066.640932][ T1269] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:06 executing program 5: 13:27:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000900ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x314, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1067.329602][ T1281] loop2: p1 p2 p3 p4 [ 1067.334363][ T1281] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1067.365454][ T1281] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1067.374563][ T1281] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1067.383332][ T1281] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1067.508323][ T1281] loop2: p1 p2 p3 p4 [ 1067.512970][ T1281] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1067.533817][ T1281] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1067.546611][ T1281] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1067.556595][ T1281] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:07 executing program 5: 13:27:07 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a050000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x14, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r5, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x1ff, 0x1, 0x10001, 0x1, 0x80, 0x0, 0x4}, 0x9c) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1067.842106][ T1302] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1067.850642][ T1302] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1068.017449][ T1304] loop3: p1 p2 p3 p4 [ 1068.021685][ T1304] loop3: partition table partially beyond EOD, truncated [ 1068.030139][ T1304] loop3: p1 start 589834 is beyond EOD, truncated [ 1068.036946][ T1304] loop3: p2 start 25 is beyond EOD, truncated [ 1068.043205][ T1304] loop3: p3 start 10 is beyond EOD, truncated [ 1068.049530][ T1304] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1068.071883][ T1311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1068.386960][ T1304] loop3: p1 p2 p3 p4 [ 1068.391012][ T1304] loop3: partition table partially beyond EOD, truncated [ 1068.398858][ T1304] loop3: p1 start 589834 is beyond EOD, truncated [ 1068.405441][ T1304] loop3: p2 start 25 is beyond EOD, truncated [ 1068.411584][ T1304] loop3: p3 start 10 is beyond EOD, truncated [ 1068.419993][ T1304] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1068.493137][ T1326] loop2: p1 p2 p3 p4 [ 1068.498460][ T1326] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1068.528663][ T1326] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1068.551641][ T1326] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1068.560991][ T1326] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1068.692841][ T1326] loop2: p1 p2 p3 p4 [ 1068.697619][ T1326] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1068.712831][ T1326] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1068.723141][ T1326] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1068.737253][ T1326] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:09 executing program 5: 13:27:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x315, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000a00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:09 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a060000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xa2403, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x8001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$vsock(0xffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x448080, 0x0) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) rt_sigsuspend(&(0x7f00000001c0)={[0x7, 0x83]}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1069.941004][ T1361] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1069.949681][ T1361] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1070.039842][ T1362] loop3: p1 p2 p3 p4 [ 1070.044602][ T1362] loop3: partition table partially beyond EOD, truncated [ 1070.052149][ T1362] loop3: p1 start 655370 is beyond EOD, truncated [ 1070.060434][ T1362] loop3: p2 start 25 is beyond EOD, truncated [ 1070.066917][ T1362] loop3: p3 start 10 is beyond EOD, truncated [ 1070.073147][ T1362] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:10 executing program 5: [ 1070.188938][ T1363] loop2: p1 p2 p3 p4 [ 1070.194002][ T1363] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1070.214892][ T1363] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1070.232350][ T1363] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1070.243756][ T1363] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x316, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1070.347988][ T1362] loop3: p1 p2 p3 p4 [ 1070.352238][ T1362] loop3: partition table partially beyond EOD, truncated [ 1070.360165][ T1362] loop3: p1 start 655370 is beyond EOD, truncated [ 1070.368385][ T1362] loop3: p2 start 25 is beyond EOD, truncated [ 1070.374915][ T1362] loop3: p3 start 10 is beyond EOD, truncated [ 1070.381070][ T1362] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1070.660099][ T1363] loop2: p1 p2 p3 p4 [ 1070.664819][ T1363] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1070.713350][ T1363] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1070.767781][ T1363] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1070.803968][ T1390] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 13:27:10 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000b00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1070.812168][ T1390] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1070.834298][ T1363] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000080)=""/90, &(0x7f0000000100)=0x5a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x1) 13:27:10 executing program 5: 13:27:10 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a070000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x317, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1071.310520][ T1394] loop3: p1 p2 p3 p4 [ 1071.314882][ T1394] loop3: partition table partially beyond EOD, truncated [ 1071.322490][ T1394] loop3: p1 start 720906 is beyond EOD, truncated [ 1071.329177][ T1394] loop3: p2 start 25 is beyond EOD, truncated [ 1071.335473][ T1394] loop3: p3 start 10 is beyond EOD, truncated [ 1071.341620][ T1394] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1071.636051][ T1394] loop3: p1 p2 p3 p4 [ 1071.640315][ T1394] loop3: partition table partially beyond EOD, truncated [ 1071.648036][ T1394] loop3: p1 start 720906 is beyond EOD, truncated [ 1071.654673][ T1394] loop3: p2 start 25 is beyond EOD, truncated [ 1071.660821][ T1394] loop3: p3 start 10 is beyond EOD, truncated [ 1071.667115][ T1394] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1071.701198][ T1413] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1071.711886][ T1413] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1072.014351][ T1415] loop2: p1 p2 p3 p4 [ 1072.018877][ T1415] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1072.045553][ T1415] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1072.060000][ T1415] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1072.071624][ T1415] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1072.242987][ T1415] loop2: p1 p2 p3 p4 [ 1072.247393][ T1415] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1072.275858][ T1415] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1072.299803][ T1415] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1072.326341][ T1415] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:13 executing program 5: 13:27:13 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x318, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000080)='./file0\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:13 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a080000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1073.436657][ T1449] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1073.444951][ T1449] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1073.481670][ T1448] loop2: p1 p2 p3 p4 [ 1073.486491][ T1448] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:13 executing program 5: [ 1073.606370][ T1448] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1073.627146][ T1448] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:27:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1073.650276][ T1448] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1073.726124][ T1453] loop3: p1 p2 p3 p4 [ 1073.730196][ T1453] loop3: partition table partially beyond EOD, truncated [ 1073.738384][ T1453] loop3: p1 start 786442 is beyond EOD, truncated [ 1073.747070][ T1453] loop3: p2 start 25 is beyond EOD, truncated [ 1073.753230][ T1453] loop3: p3 start 10 is beyond EOD, truncated [ 1073.759938][ T1453] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x547a01, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000000c0)=0x3ff, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x8001, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000200)) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="12016aaa000000406b1d01014000010203010902"], &(0x7f00000018c0)={0x0, 0x0, 0x12, &(0x7f0000001740)=ANY=[@ANYBLOB="050f12000710"]}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0xa0200) [ 1073.925997][ T1453] loop3: p1 p2 p3 p4 [ 1073.930131][ T1453] loop3: partition table partially beyond EOD, truncated [ 1073.938305][ T1453] loop3: p1 start 786442 is beyond EOD, truncated [ 1073.944913][ T1453] loop3: p2 start 25 is beyond EOD, truncated [ 1073.951106][ T1453] loop3: p3 start 10 is beyond EOD, truncated [ 1073.957384][ T1453] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x319, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:14 executing program 5: 13:27:14 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a090000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000d00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1074.462117][ T1477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1074.469211][ T1481] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1074.488069][ T1481] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1074.768083][ T1488] loop2: p1 p2 p3 p4 [ 1074.772709][ T1488] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1074.804248][ T2971] usb 1-1: new high-speed USB device number 13 using dummy_hcd 13:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:14 executing program 5: [ 1074.896392][ T1488] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1074.932536][ T1488] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1074.985548][ T1488] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1075.025510][ T1494] loop3: p1 p2 p3 p4 [ 1075.029630][ T1494] loop3: partition table partially beyond EOD, truncated [ 1075.037528][ T1494] loop3: p1 start 851978 is beyond EOD, truncated [ 1075.044474][ T1494] loop3: p2 start 25 is beyond EOD, truncated [ 1075.050617][ T1494] loop3: p3 start 10 is beyond EOD, truncated [ 1075.056944][ T1494] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000010003, 0x0) [ 1075.243725][ T1488] loop2: p1 p2 p3 p4 [ 1075.248401][ T1488] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1075.325133][ T2971] usb 1-1: config 0 has no interfaces? [ 1075.349912][ T1488] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1075.430406][ T1514] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1075.433988][ T1488] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1075.438864][ T1514] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000010003, 0x0) 13:27:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000e00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1075.504879][ T2971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1075.514203][ T2971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.522270][ T2971] usb 1-1: Product: syz [ 1075.526718][ T2971] usb 1-1: Manufacturer: syz [ 1075.531401][ T2971] usb 1-1: SerialNumber: syz [ 1075.543726][ T1488] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:15 executing program 5: [ 1075.751556][ T2971] usb 1-1: config 0 descriptor?? [ 1076.017016][ T8493] usb 1-1: USB disconnect, device number 13 [ 1076.166038][ T1532] loop3: p1 p2 p3 p4 [ 1076.170250][ T1532] loop3: partition table partially beyond EOD, truncated [ 1076.178118][ T1532] loop3: p1 start 917514 is beyond EOD, truncated [ 1076.184985][ T1532] loop3: p2 start 25 is beyond EOD, truncated [ 1076.191127][ T1532] loop3: p3 start 10 is beyond EOD, truncated [ 1076.197393][ T1532] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1076.429501][ T1532] loop3: p1 p2 p3 p4 [ 1076.433782][ T1532] loop3: partition table partially beyond EOD, truncated [ 1076.441479][ T1532] loop3: p1 start 917514 is beyond EOD, truncated [ 1076.448236][ T1532] loop3: p2 start 25 is beyond EOD, truncated [ 1076.454492][ T1532] loop3: p3 start 10 is beyond EOD, truncated [ 1076.460629][ T1532] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000080)=0xc321) 13:27:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:16 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0a0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000010003, 0x0) 13:27:16 executing program 5: 13:27:16 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a000f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1076.894977][ T1553] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1076.903282][ T1553] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1076.968653][ T1552] loop2: p1 p2 p3 p4 [ 1076.973361][ T1552] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1076.991431][ T1552] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1077.002655][ T1552] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1077.016630][ T1552] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1077.172163][ T1552] loop2: p1 p2 p3 p4 [ 1077.177009][ T1552] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:17 executing program 5: [ 1077.248253][ T1552] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1077.308247][ T1552] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1077.322375][ T1552] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1077.346781][ T1571] loop3: p1 p2 p3 p4 [ 1077.350992][ T1571] loop3: partition table partially beyond EOD, truncated [ 1077.358948][ T1571] loop3: p1 start 983050 is beyond EOD, truncated [ 1077.365750][ T1571] loop3: p2 start 25 is beyond EOD, truncated [ 1077.371894][ T1571] loop3: p3 start 10 is beyond EOD, truncated [ 1077.378176][ T1571] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) 13:27:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1077.496809][ T1571] loop3: p1 p2 p3 p4 [ 1077.501032][ T1571] loop3: partition table partially beyond EOD, truncated [ 1077.508884][ T1571] loop3: p1 start 983050 is beyond EOD, truncated [ 1077.515619][ T1571] loop3: p2 start 25 is beyond EOD, truncated [ 1077.521795][ T1571] loop3: p3 start 10 is beyond EOD, truncated [ 1077.528036][ T1571] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:17 executing program 5: 13:27:17 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0b0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:17 executing program 5: 13:27:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a001000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1077.950809][ T1593] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1077.959211][ T1593] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1078.124685][ T1595] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) 13:27:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1078.358017][ T1603] loop2: p1 p2 p3 p4 [ 1078.362726][ T1603] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1078.394317][ T1603] loop2: p2 size 100663296 extends beyond EOD, truncated 13:27:18 executing program 5: [ 1078.414422][ T1603] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1078.438331][ T1603] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1078.529986][ T1611] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1078.538585][ T1611] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1078.654962][ T1603] loop2: p1 p2 p3 p4 [ 1078.661135][ T1603] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001340)={&(0x7f0000000980)={0x50, 0x0, 0x1, {0x7, 0x1f, 0xffff, 0x3080000, 0x8, 0x9, 0x5, 0x400}}, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0x5, {0x4}}, &(0x7f0000000a00)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000000a40)={0x18, 0x0, 0x1000, {0x9}}, &(0x7f0000000a80)={0x18, 0x0, 0x800, {0x3f}}, &(0x7f0000000b40)={0x28, 0x0, 0x100, {{0x3, 0x7, 0x1}}}, &(0x7f0000000b80)={0x60, 0xfffffffffffffff5, 0x4, {{0x15, 0xdd5f, 0x0, 0x6bba, 0x7f, 0x484, 0x1, 0x3}}}, &(0x7f0000000c00)={0x18, 0x0, 0x81, {0x4}}, &(0x7f0000000c40)={0x14, 0x0, 0x80000001, {'%{^\x00'}}, &(0x7f0000000c80)={0x20, 0x0, 0x40, {0x0, 0x4}}, &(0x7f0000000e40)={0x78, 0x0, 0x5c28000, {0x2, 0x1, 0x0, {0x5, 0x800, 0x0, 0x1, 0x7462, 0x0, 0x3, 0x100000, 0x8, 0x8000, 0x101, 0x0, r8, 0x8, 0x80000001}}}, &(0x7f0000000ec0)={0x90, 0x0, 0x3, {0x0, 0x0, 0xd781, 0x200, 0x7e, 0xfffffff8, {0x3, 0x3, 0x8, 0x4, 0x8, 0x100000000, 0x30, 0x62af7948, 0x80000000, 0x2000, 0x2, r7, r6, 0x3f, 0x6}}}, &(0x7f0000000f80)={0xd0, 0x0, 0x4, [{0x0, 0x974, 0x8, 0x7, 'fuseblk\x00'}, {0x0, 0x5, 0x8, 0x2, 'fuseblk\x00'}, {0x5, 0x9, 0x5, 0x80000000, ':]!:@'}, {0x0, 0x80000001, 0x0, 0xfff}, {0x5, 0x200, 0x12, 0x90, '[)+,\xa6%-()$!+!%^)#&'}, {0x2, 0x80000001, 0x0, 0x3ff}]}, &(0x7f0000001080)={0xb0, 0xd4aa670d0efb2cf7, 0x6, [{{0x3, 0x0, 0x9, 0x11b7, 0x3, 0x5, {0x4, 0x2, 0x100, 0xfff, 0x9168, 0xff, 0x200, 0x5, 0x1, 0xc000, 0x401, r7, 0x0, 0x8, 0x40}}, {0x0, 0x7, 0x1, 0x2, '{'}}]}, &(0x7f0000001240)={0xa0, 0xffffffffffffffd1, 0x4, {{0x1, 0x0, 0x10000, 0x4, 0x81, 0x47, {0x5, 0x8000, 0x3, 0x2, 0x1, 0xffffffff00000000, 0x5, 0x80000000, 0x0, 0x1000, 0x307, 0x0, 0x0, 0x7f, 0x7fff}}, {0x0, 0xb}}}, &(0x7f0000001300)={0x20, 0x0, 0x8, {0x2, 0x0, 0x1, 0x101}}}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r10) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x2010040, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read'}}], [{@euid_eq={'euid', 0x3d, r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/&\xac\\'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x37, 0x31, 0x34, 0x35, 0x65, 0x38, 0x35], 0x2d, [0x2, 0x64, 0x63, 0x3d], 0x2d, [0x30, 0x62, 0x66, 0xa608eb7d3a2f9a79], 0x2d, [0x38, 0x34, 0x32, 0x66], 0x2d, [0x30, 0x31, 0x66, 0x63, 0x62, 0x39, 0x32, 0x64]}}}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '[/#,'}}, {@uid_lt={'uid<', r10}}]}}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe4) r12 = getgid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x78, 0x0, r4, {0x4, 0x8, 0x0, {0x3, 0x6, 0x6, 0x16, 0x7, 0xa0, 0x6, 0x9, 0x7, 0x0, 0xf4f, r11, r12, 0x400, 0x9f6}}}, 0x78) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1078.733288][ T1603] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1078.755689][ T1616] loop3: p1 p2 p3 p4 [ 1078.761515][ T1616] loop3: partition table partially beyond EOD, truncated [ 1078.769649][ T1616] loop3: p1 start 1048586 is beyond EOD, truncated [ 1078.776403][ T1616] loop3: p2 start 25 is beyond EOD, truncated [ 1078.782550][ T1616] loop3: p3 start 10 is beyond EOD, truncated [ 1078.788916][ T1616] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1078.812414][ T1603] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1078.904271][ T1603] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1079.034419][ T1634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) 13:27:19 executing program 5: [ 1079.180210][ T1616] loop3: p1 p2 p3 p4 [ 1079.184519][ T1616] loop3: partition table partially beyond EOD, truncated [ 1079.192055][ T1616] loop3: p1 start 1048586 is beyond EOD, truncated [ 1079.198978][ T1616] loop3: p2 start 25 is beyond EOD, truncated [ 1079.205270][ T1616] loop3: p3 start 10 is beyond EOD, truncated [ 1079.211452][ T1616] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:19 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0c0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x8001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x2, 0x8000, 0x6d, 0x7, 0x3, 0x20, 0x3}, &(0x7f00000000c0)=0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1079.564934][ T1650] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1079.573235][ T1650] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:19 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a001100ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:19 executing program 5: 13:27:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1079.939233][ T1655] loop2: p1 p2 p3 p4 [ 1079.944114][ T1655] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1079.957717][ T1655] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1079.987216][ T1655] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1080.006763][ T1655] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1080.069797][ T1662] loop3: p1 p2 p3 p4 [ 1080.074403][ T1662] loop3: partition table partially beyond EOD, truncated [ 1080.081993][ T1662] loop3: p1 start 1114122 is beyond EOD, truncated [ 1080.088866][ T1662] loop3: p2 start 25 is beyond EOD, truncated [ 1080.096701][ T1662] loop3: p3 start 10 is beyond EOD, truncated [ 1080.102858][ T1662] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1080.172887][ T1676] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1080.181276][ T1676] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000005c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) [ 1080.422529][ T1659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1080.450958][ T1662] loop3: p1 p2 p3 p4 [ 1080.455290][ T1662] loop3: partition table partially beyond EOD, truncated [ 1080.462825][ T1662] loop3: p1 start 1114122 is beyond EOD, truncated 13:27:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x320, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:20 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1080.469658][ T1662] loop3: p2 start 25 is beyond EOD, truncated [ 1080.476292][ T1662] loop3: p3 start 10 is beyond EOD, truncated [ 1080.482433][ T1662] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:20 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0d0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x8001, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000080)={0xfffffffe, "c9eab3dafdccaec68bf8f29031f7173055c6b055194568a0f88dd08921e06128", 0x2, 0x5, 0x9, 0x10000, 0x4}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r5, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1080.995023][ T1696] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1081.003452][ T1696] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a001200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:21 executing program 5: syz_mount_image$omfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:27:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x321, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:21 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) [ 1081.360337][ T1700] loop2: p1 p2 p3 p4 [ 1081.365187][ T1700] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1081.380460][ T1700] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1081.400074][ T1700] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1081.409539][ T1702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1081.409884][ T1700] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1081.570172][ T1700] loop2: p1 p2 p3 p4 [ 1081.575098][ T1700] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1081.592176][ T1700] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1081.610350][ T1716] loop3: p1 p2 p3 p4 [ 1081.614589][ T1716] loop3: partition table partially beyond EOD, truncated [ 1081.622178][ T1716] loop3: p1 start 1179658 is beyond EOD, truncated [ 1081.631305][ T1716] loop3: p2 start 25 is beyond EOD, truncated [ 1081.637972][ T1716] loop3: p3 start 10 is beyond EOD, truncated [ 1081.644268][ T1716] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1081.713399][ T1700] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1081.789952][ T1700] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1081.828634][ T1716] loop3: p1 p2 p3 p4 [ 1081.834984][ T1716] loop3: partition table partially beyond EOD, truncated [ 1081.842558][ T1716] loop3: p1 start 1179658 is beyond EOD, truncated [ 1081.849806][ T1716] loop3: p2 start 25 is beyond EOD, truncated [ 1081.856096][ T1716] loop3: p3 start 10 is beyond EOD, truncated [ 1081.862246][ T1716] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) r3 = openat$vsock(0xffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x181000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000100)={0x0, 0xc2, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:21 executing program 5: syz_mount_image$omfs(0x0, &(0x7f0000000140)='./file0\x00', 0x9d5, 0x0, 0x0, 0x2000002, &(0x7f0000003300)={[{'.),-!--[$%%${{\\'}], [{@dont_hash='dont_hash'}]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003680)) 13:27:21 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) 13:27:21 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0e0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a002500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1082.557861][ T1752] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1082.566437][ T1752] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1082.644558][ T1753] Unknown ioctl 1140895375 13:27:22 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000010003, 0x0) [ 1082.728384][ T1758] loop2: p1 p2 p3 p4 [ 1082.733052][ T1758] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1082.830543][ T1764] loop3: p1 p2 p3 p4 [ 1082.834828][ T1764] loop3: partition table partially beyond EOD, truncated [ 1082.841022][ T1758] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1082.842318][ T1764] loop3: p1 start 2424842 is beyond EOD, truncated [ 1082.858191][ T1764] loop3: p2 start 25 is beyond EOD, truncated [ 1082.865349][ T1764] loop3: p3 start 10 is beyond EOD, truncated [ 1082.871502][ T1764] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_getvlan={0x18}, 0x18}}, 0x0) [ 1082.880272][ T1758] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1082.891858][ T1758] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x35, 0x0, 0x112002a, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x322, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1083.058699][ T1758] loop2: p1 p2 p3 p4 [ 1083.064842][ T1758] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1083.075338][ T1758] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1083.085914][ T1758] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1083.095071][ T1758] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:23 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1083.275523][ T1764] loop3: p1 p2 p3 p4 [ 1083.279719][ T1764] loop3: partition table partially beyond EOD, truncated [ 1083.287637][ T1764] loop3: p1 start 2424842 is beyond EOD, truncated [ 1083.294357][ T1764] loop3: p2 start 25 is beyond EOD, truncated [ 1083.300499][ T1764] loop3: p3 start 10 is beyond EOD, truncated [ 1083.306840][ T1764] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:23 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a0f0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1083.503934][ T1792] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1083.512376][ T1792] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a002f00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:23 executing program 5: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003280)=[{&(0x7f0000002280)="b9", 0x1, 0x80000001}], 0x0, 0x0) 13:27:23 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x323, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1084.059144][ T1806] loop2: p1 p2 p3 p4 [ 1084.064250][ T1806] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1084.078853][ T1806] loop2: p2 size 100663296 extends beyond EOD, truncated 13:27:24 executing program 0: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)={0x1e0, 0x4b0, 0x690, 0x2000, 0x4, 0x1, 0x8, 0x0, {0x3ff, 0x9}, {0x2, 0xa8}, {0x7, 0x5, 0x1}, {0x5e, 0x114b, 0x1}, 0x2, 0x1, 0x9, 0x300000, 0x1, 0x6, 0xd343, 0xffffffff, 0x5, 0x3, 0xfffffffe, 0x8, 0x21, 0x2, 0x0, 0x6}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1084.147982][ T1806] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1084.151296][ T1813] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1084.163746][ T1813] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1084.233423][ T1806] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x324, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1084.348890][ T1816] loop3: p1 p2 p3 p4 [ 1084.352957][ T1816] loop3: partition table partially beyond EOD, truncated [ 1084.361070][ T1816] loop3: p1 start 3080202 is beyond EOD, truncated [ 1084.367761][ T1816] loop3: p2 start 25 is beyond EOD, truncated [ 1084.374001][ T1816] loop3: p3 start 10 is beyond EOD, truncated [ 1084.380145][ T1816] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:24 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1084.645447][ T1816] loop3: p1 p2 p3 p4 [ 1084.649595][ T1816] loop3: partition table partially beyond EOD, truncated [ 1084.657462][ T1816] loop3: p1 start 3080202 is beyond EOD, truncated [ 1084.664232][ T1816] loop3: p2 start 25 is beyond EOD, truncated [ 1084.670381][ T1816] loop3: p3 start 10 is beyond EOD, truncated [ 1084.676740][ T1816] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:24 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340)='freezer.state\x00', 0x2, 0x0) [ 1084.768992][ T1839] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1084.777552][ T1839] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:24 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a100000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1084.868705][ T1842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:24 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004200ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:25 executing program 5: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000003280)=[{&(0x7f0000000180)="fc", 0x1}, {&(0x7f0000000280)='I', 0x1, 0x10000}], 0x0, 0x0) 13:27:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x325, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1085.303978][ T1850] loop2: p1 p2 p3 p4 [ 1085.308696][ T1850] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1085.344403][ T1850] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1085.353975][ T1850] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1085.369139][ T1850] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:25 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1085.631116][ T1850] loop2: p1 p2 p3 p4 [ 1085.635812][ T1850] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1085.690975][ T1850] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1085.700535][ T1850] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1085.721335][ T1850] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1085.812945][ T1877] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1085.821295][ T1877] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:25 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1085.854817][ T1873] loop3: p1 p2 p3 p4 [ 1085.859120][ T1873] loop3: partition table partially beyond EOD, truncated [ 1085.867086][ T1873] loop3: p1 start 4325386 is beyond EOD, truncated [ 1085.873765][ T1873] loop3: p2 start 25 is beyond EOD, truncated [ 1085.879907][ T1873] loop3: p3 start 10 is beyond EOD, truncated [ 1085.886145][ T1873] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a110000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:26 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000002640)='/dev/snapshot\x00', 0x0, 0x0) [ 1086.240784][ T1873] loop3: p1 p2 p3 p4 [ 1086.245078][ T1873] loop3: partition table partially beyond EOD, truncated [ 1086.252662][ T1873] loop3: p1 start 4325386 is beyond EOD, truncated [ 1086.261243][ T1873] loop3: p2 start 25 is beyond EOD, truncated [ 1086.268303][ T1873] loop3: p3 start 10 is beyond EOD, truncated [ 1086.274521][ T1873] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x326, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x40281) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1086.408262][ T1895] loop2: p1 p2 p3 p4 [ 1086.412968][ T1895] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1086.442384][ T1895] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1086.484497][ T1895] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1086.494184][ T1895] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1086.708133][ T1895] loop2: p1 p2 p3 p4 [ 1086.712722][ T1895] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1086.777281][ T1895] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1086.799133][ T1921] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1086.807605][ T1921] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1086.857989][ T1895] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:27:26 executing program 5: setrlimit(0x11, &(0x7f0000000000)) [ 1086.900183][ T1895] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1086.966349][ T1928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:27 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a120000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1087.246509][ T1939] loop3: p1 p2 p3 p4 [ 1087.250761][ T1939] loop3: partition table partially beyond EOD, truncated [ 1087.261209][ T1939] loop3: p1 start 4718602 is beyond EOD, truncated [ 1087.268455][ T1939] loop3: p2 start 25 is beyond EOD, truncated [ 1087.274703][ T1939] loop3: p3 start 10 is beyond EOD, truncated [ 1087.280864][ T1939] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:27 executing program 5: pselect6(0x40, &(0x7f0000000640)={0x70}, 0x0, 0x0, &(0x7f0000000700)={0x77359400}, 0x0) 13:27:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x327, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1087.428976][ T1939] loop3: p1 p2 p3 p4 [ 1087.433113][ T1939] loop3: partition table partially beyond EOD, truncated [ 1087.440968][ T1939] loop3: p1 start 4718602 is beyond EOD, truncated [ 1087.447880][ T1939] loop3: p2 start 25 is beyond EOD, truncated [ 1087.454136][ T1939] loop3: p3 start 10 is beyond EOD, truncated [ 1087.460281][ T1939] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a004c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:27 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1087.820020][ T1959] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1087.828350][ T1959] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.852343][ T1957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 13:27:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x328, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1088.008045][ T1963] loop2: p1 p2 p3 p4 [ 1088.012872][ T1963] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:27 executing program 5: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1088.050679][ T1963] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1088.065007][ T1963] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1088.080546][ T1963] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x0, 0x2, 0x2}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1088.227689][ T1963] loop2: p1 p2 p3 p4 [ 1088.232286][ T1963] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1088.251655][ T1963] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1088.262485][ T1963] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1088.309586][ T1963] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1088.380346][ T1992] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1088.391071][ T1992] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1088.495446][ T1991] loop3: p1 p2 p3 p4 [ 1088.499575][ T1991] loop3: partition table partially beyond EOD, truncated [ 1088.507562][ T1991] loop3: p1 start 4980746 is beyond EOD, truncated [ 1088.514336][ T1991] loop3: p2 start 25 is beyond EOD, truncated [ 1088.520478][ T1991] loop3: p3 start 10 is beyond EOD, truncated [ 1088.526993][ T1991] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:28 executing program 5: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000003180)={0x0, 0x0, 0x2000}, 0x10) [ 1088.649842][ T1991] loop3: p1 p2 p3 p4 [ 1088.654088][ T1991] loop3: partition table partially beyond EOD, truncated [ 1088.661775][ T1991] loop3: p1 start 4980746 is beyond EOD, truncated [ 1088.669166][ T1991] loop3: p2 start 25 is beyond EOD, truncated [ 1088.675479][ T1991] loop3: p3 start 10 is beyond EOD, truncated [ 1088.681727][ T1991] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:28 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200), 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a130000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x329, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:28 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005400ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:28 executing program 5: r0 = getpgrp(0xffffffffffffffff) setpgid(r0, 0x0) 13:27:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x8001, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, @nfc={0x27, 0x1, 0x1, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, @qipcrtr={0x2a, 0xffffffff}, 0x1, 0x0, 0x0, 0x0, 0x11d, &(0x7f0000000180)='geneve0\x00', 0x2, 0x605de, 0x400}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x9, 0x2, 0x1, 'queue1\x00', 0x7}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1089.388556][ T2030] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1089.396934][ T2030] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1089.538465][ T2030] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1089.546967][ T2030] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:29 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200), 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1089.666314][ T2037] loop2: p1 p2 p3 p4 [ 1089.671094][ T2037] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1089.745651][ T2039] loop3: p1 p2 p3 p4 [ 1089.749722][ T2039] loop3: partition table partially beyond EOD, truncated [ 1089.757923][ T2039] loop3: p1 start 5505034 is beyond EOD, truncated [ 1089.764666][ T2039] loop3: p2 start 25 is beyond EOD, truncated [ 1089.770815][ T2039] loop3: p3 start 10 is beyond EOD, truncated [ 1089.777105][ T2039] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:29 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 13:27:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32a, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1089.888354][ T2037] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1089.944373][ T2037] loop2: p3 size 1912633223 extends beyond EOD, truncated 13:27:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$negate(0xd, 0x0, 0x4, 0xfffffffffffffffa) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000080)="1bf7f1dd3059c8aa0d1c3b0b1389d70168b0d49bc3740d8e8a79b1f45203b69931f7b697e56f5a1aa3b30e4a8a58075adf2e8e2ea14e40f340a9", 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1090.008386][ T2037] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1090.046590][ T2039] loop3: p1 p2 p3 p4 [ 1090.050684][ T2039] loop3: partition table partially beyond EOD, truncated [ 1090.058626][ T2039] loop3: p1 start 5505034 is beyond EOD, truncated [ 1090.065508][ T2039] loop3: p2 start 25 is beyond EOD, truncated [ 1090.071656][ T2039] loop3: p3 start 10 is beyond EOD, truncated [ 1090.077991][ T2039] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005500ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1090.320132][ T2037] loop2: p1 p2 p3 p4 [ 1090.324851][ T2037] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1090.361996][ T2037] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1090.371024][ T2037] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1090.386726][ T2037] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1090.412449][ T2091] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1090.420847][ T2091] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:30 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a140000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0286429, &(0x7f0000000240)={r3, 0x9, &(0x7f0000000100)=[0x50, 0x8, 0x8, 0x7, 0x7, 0x8000, 0x9, 0xff, 0x4a15], &(0x7f0000000180)=[0xfffffff7, 0x1, 0x12, 0x7fff, 0xff, 0x7, 0x8000, 0x4], 0xa0, 0x1, 0x10001, &(0x7f00000001c0)=[0x80000000], &(0x7f0000000200)=[0x8, 0x4, 0x518c, 0x9]}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, r8) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@op={0x10}], 0x10, 0x20000841}, 0x4000) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8000, &(0x7f0000000980)=""/4096) 13:27:30 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200), 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1090.694163][ T9303] usb 6-1: new high-speed USB device number 4 using dummy_hcd 13:27:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1090.800080][ T2105] loop3: p1 p2 p3 p4 [ 1090.804306][ T2105] loop3: partition table partially beyond EOD, truncated [ 1090.811713][ T2105] loop3: p1 start 5570570 is beyond EOD, truncated [ 1090.818572][ T2105] loop3: p2 start 25 is beyond EOD, truncated [ 1090.825204][ T2105] loop3: p3 start 10 is beyond EOD, truncated [ 1090.831351][ T2105] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1091.006056][ T2105] loop3: p1 p2 p3 p4 [ 1091.010116][ T2105] loop3: partition table partially beyond EOD, truncated [ 1091.018021][ T2105] loop3: p1 start 5570570 is beyond EOD, truncated [ 1091.024732][ T2105] loop3: p2 start 25 is beyond EOD, truncated [ 1091.030869][ T2105] loop3: p3 start 10 is beyond EOD, truncated [ 1091.037129][ T2105] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1091.101227][ T9303] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1091.167746][ T9303] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1091.175574][ T9303] usb 6-1: can't read configurations, error -71 [ 1091.240100][ T2122] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1091.248421][ T2122] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.291318][ T2123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1091.327697][ T2124] loop2: p1 p2 p3 p4 [ 1091.332311][ T2124] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:31 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) [ 1091.433238][ T2124] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1091.518623][ T2124] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1091.581494][ T2124] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a005c00ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32c, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x408102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2080, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x8001, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000180)=""/166) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000100)={0x8, 0x8005, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1091.898681][ T2124] loop2: p1 p2 p3 p4 [ 1091.903316][ T2124] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1091.913974][ T2124] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1091.914567][ T9303] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1091.922712][ T2124] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1091.937895][ T2124] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1092.061381][ T2152] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1092.069793][ T2152] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.218238][ T2156] loop3: p1 p2 p3 p4 [ 1092.222511][ T2156] loop3: partition table partially beyond EOD, truncated [ 1092.230467][ T2156] loop3: p1 start 6029322 is beyond EOD, truncated [ 1092.237426][ T2156] loop3: p2 start 25 is beyond EOD, truncated [ 1092.243853][ T2156] loop3: p3 start 10 is beyond EOD, truncated [ 1092.250039][ T2156] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1092.334427][ T9303] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1092.403920][ T9303] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1092.411791][ T9303] usb 6-1: can't read configurations, error -71 [ 1092.491045][ T9303] usb usb6-port1: attempt power cycle [ 1092.532188][ T2156] loop3: p1 p2 p3 p4 [ 1092.536814][ T2156] loop3: partition table partially beyond EOD, truncated [ 1092.546460][ T2156] loop3: p1 start 6029322 is beyond EOD, truncated [ 1092.553067][ T2156] loop3: p2 start 25 is beyond EOD, truncated [ 1092.559325][ T2156] loop3: p3 start 10 is beyond EOD, truncated [ 1092.565626][ T2156] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:32 executing program 5: syz_mount_image$omfs(&(0x7f0000000100)='omfs\x00', 0x0, 0x0, 0x0, &(0x7f0000003280), 0x0, &(0x7f0000003300)) 13:27:32 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a250000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) 13:27:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32d, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(r2, &(0x7f0000000080)={[0x40, 0x7fffffff]}, 0x8, 0x80000) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x80) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000640)={0x5, "f4c2a481def0e6e9cf4651edf6cb07d5d7d9cdb49b344dd8d879e75391eafd0a963166a6ef0d282a3203096b8c93b431c6323c2614dcd7c8d81fdf23f3b0f1e1"}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) keyctl$search(0xa, 0x0, &(0x7f00000006c0)='big_key\x00', &(0x7f0000000700)={'syz', 0x0}, 0xfffffffffffffffd) [ 1092.708122][ T2171] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1092.716838][ T2171] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.838058][ T2173] loop2: p1 p2 p3 p4 [ 1092.843734][ T2173] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1092.874348][ T2173] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1092.883816][ T2173] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1092.919246][ T2173] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32e, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0x5, 0x1740000000000000}) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) [ 1093.396129][ T2203] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1093.406763][ T2203] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:33 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a260000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1093.636456][ T2205] loop3: p1 p2 p3 p4 [ 1093.641212][ T2205] loop3: partition table partially beyond EOD, truncated [ 1093.642693][ T2208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1093.649256][ T2205] loop3: p1 start 6291466 is beyond EOD, truncated [ 1093.674580][ T2205] loop3: p2 start 25 is beyond EOD, truncated [ 1093.681115][ T2205] loop3: p3 start 10 is beyond EOD, truncated [ 1093.688991][ T2205] loop3: p4 start 3976200192 is beyond EOD, truncated [ 1094.011838][ T2218] loop2: p1 p2 p3 p4 [ 1094.018421][ T2218] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1094.084124][ T2218] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1094.122214][ T2218] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1094.147360][ T2218] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1094.308485][ T2218] loop2: p1 p2 p3 p4 [ 1094.313227][ T2218] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1094.332699][ T2218] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1094.342338][ T2218] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1094.357442][ T2218] loop2: p4 start 3976200192 is beyond EOD, truncated 13:27:34 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x8000010003, 0x0) 13:27:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) 13:27:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x32f, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) 13:27:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_mount_image$udf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x11fb, 0x0, 0x10a]}) 13:27:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006300ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) 13:27:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a2f0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1094.958323][ T2243] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3669639965 (58714239440 ns) > initial count (21416531584 ns). Using initial count to start timer. [ 1095.049853][ T2250] loop2: p1 p2 p3 p4 [ 1095.055306][ T2250] loop2: p1 size 78398975 extends beyond EOD, truncated [ 1095.061084][ T2254] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1095.071918][ T2254] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1095.084673][ T2250] loop2: p2 size 100663296 extends beyond EOD, truncated 13:27:34 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="e71aee31eaf1386c000000000000000000000000000000000000000000000000d6f7055513444eb291145d244e3be009000001000000000001000000000000005f42485266535f4d07000000000000000040d30100000000004050010000000000000000000000000000000000000000000000080000000000300200000000000600000000000000010000000000000000100000004000000040000000100000810000000500000000000000000000000000000000000000000000006109000000000000010000000001000000000000000000000800000000000080050000000000100000001000000010000000000000000000000000000000000000000000000000000000000000000004608225acec4fb69a3adfd43c53416bd6f7055513444eb291145d244e3be009", 0x12b, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e400005001000000000000800000000000020000000000000000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000004608225acec4fb69a3adfd43c53416b01000000000000000000d0010000000004608225acec4fb69a3adfd43c53416b0000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000004608225acec4fb69a3adfd43c53416b01000000000000000000d0010000000004608225acec4fb69a3adfd43c53416b", 0xed, 0x10320}, {&(0x7f0000010400)="00000000000000000000000040d2010000000005000000000000000040500100000000050000000000000000c0d1010000000005000000000000000000d0010000000004000000000000000000d2010000000005000000000000000000d10100000000040000000000000000000008000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0d201000000000600000000000000004050010000000005000000000000000080d2010000000006000000000000000080d0010000000006000000000000000000d30100000000060000000000000000c0d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d301000000000700000000000000004050010000000005000000000000000080d3010000000007000000000000000080d0010000000006000000000000000000d30100000000060000000000000000c0d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d001000000000400000000000000000050010000000004000000000000000080d0010000000004000000000000000000d00100000000040000000000000000c0d0010000000004000000000000000000d1010000000004000000000000000000000800000000000002000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000040)={[{@ssd_spread='ssd_spread'}]}) [ 1095.094150][ T2250] loop2: p3 size 1912633223 extends beyond EOD, truncated [ 1095.118511][ T2250] loop2: p4 start 3976200192 is beyond EOD, truncated [ 1095.200903][ T2256] loop3: p1 p2 p3 p4 [ 1095.205542][ T2256] loop3: partition table partially beyond EOD, truncated [ 1095.213424][ T2256] loop3: p1 start 6488074 is beyond EOD, truncated [ 1095.220433][ T2256] loop3: p2 start 25 is beyond EOD, truncated [ 1095.226670][ T2256] loop3: p3 start 10 is beyond EOD, truncated [ 1095.233083][ T2256] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:35 executing program 0: epoll_create(0x94f7) 13:27:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x330, &(0x7f0000000080)=[{&(0x7f0000000140)="d80000001e008105e00f80ecdb4cb9040a1d65ef0b007405e8fe55a10a0012000200142603000e120900090014000000a800080008000a00e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4eb5edbb57a5081d0ca9e00360d9aed262f3d40fad95667e055dcdf634c1f215ce3ce81e4edef3d93452a92914b43370e9703f7825933f40bd2633221fa22aede3f99e1d6b784ffa1e3df15199be18fe3f0412179d69b00ed639ea2f5d920e94e007db5db00"/216, 0xd8}], 0x1}, 0x0) [ 1095.524304][ T2256] loop3: p1 p2 p3 p4 [ 1095.528448][ T2256] loop3: partition table partially beyond EOD, truncated [ 1095.536304][ T2256] loop3: p1 start 6488074 is beyond EOD, truncated [ 1095.542895][ T2256] loop3: p2 start 25 is beyond EOD, truncated [ 1095.549373][ T2256] loop3: p3 start 10 is beyond EOD, truncated [ 1095.557315][ T2256] loop3: p4 start 3976200192 is beyond EOD, truncated 13:27:35 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a3a0000ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffcb}]) [ 1095.833254][ T2279] BTRFS info (device loop5): enabling ssd optimizations [ 1095.841001][ T2279] BTRFS info (device loop5): using spread ssd allocation scheme [ 1095.849155][ T2279] BTRFS info (device loop5): disk space caching is enabled [ 1095.856613][ T2279] BTRFS info (device loop5): has skinny extents [ 1096.018459][ T2287] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1096.028310][ T2287] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. 13:27:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="020181000fff0a006800ff45ac04800000006300e931190000000000000680170003a6fff7ff0a000000877700720030070400000000000000ed690000da55aa", 0x40, 0x1c0}]) [ 1096.117673][ T2288] loop2: p1 p2 p3 p4 [ 1096.122676][ T2288] loop2: p1 size 78398975 extends beyond EOD, truncated 13:27:36 executing program 0: [ 1096.348357][ T2288] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1096.382424][ T2300] Kernel panic - not syncing: kmsan_in_runtime: -1 [ 1096.389204][ T2300] CPU: 1 PID: 2300 Comm: btrfs-endio-met Not tainted 5.9.0-rc8-syzkaller #0 [ 1096.398119][ T2300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.408681][ T2300] Call Trace: [ 1096.412006][ T2300] dump_stack+0x21c/0x280 [ 1096.416491][ T2300] panic+0x4c8/0xea7 [ 1096.420549][ T2300] ? util_est_dequeue+0xd8/0x970 [ 1096.425600][ T2300] ? kmsan_internal_memset_shadow+0x4e/0xb0 [ 1096.431780][ T2300] __msan_poison_alloca+0x106/0x110 [ 1096.437154][ T2300] ? util_est_dequeue+0xd8/0x970 [ 1096.442208][ T2300] ? util_est_dequeue+0xd8/0x970 [ 1096.447477][ T2300] util_est_dequeue+0xd8/0x970 [ 1096.452445][ T2300] ? psi_group_change+0x10e3/0x1440 [ 1096.457674][ T2300] dequeue_task_fair+0x891/0x1260 [ 1096.463147][ T2300] ? enqueue_task_fair+0x2f80/0x2f80 [ 1096.468461][ T2300] deactivate_task+0x312/0x530 [ 1096.473576][ T2300] detach_tasks+0x1823/0x1db0 [ 1096.478502][ T2300] ? kmsan_get_metadata+0x116/0x180 [ 1096.483733][ T2300] load_balance+0x244d/0x5030 [ 1096.488536][ T2300] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1096.494491][ T2300] newidle_balance+0x477/0x12e0 [ 1096.499558][ T2300] pick_next_task_fair+0x49d/0x1250 [ 1096.504925][ T2300] pick_next_task+0x18e/0x6b0 [ 1096.509704][ T2300] __schedule+0x24b/0x590 [ 1096.514154][ T2300] schedule+0x260/0x330 [ 1096.518419][ T2300] schedule_preempt_disabled+0xe/0x10 [ 1096.523820][ T2300] kthread+0x421/0x560 [ 1096.528333][ T2300] ? rcu_free_pwq+0x70/0x70 [ 1096.532948][ T2300] ? kthread_blkcg+0x110/0x110 [ 1096.537946][ T2300] ret_from_fork+0x1f/0x30 [ 1097.645771][ T2300] Shutting down cpus with NMI [ 1097.662296][ T2300] Kernel Offset: disabled [ 1097.666892][ T2300] Rebooting in 86400 seconds..