7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:34 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000020a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:34 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07080000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) [ 884.415193][T29882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:53:34 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000680a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:34 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:34 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 884.655820][T29906] loop2: p1 < > p2 p3 < > p4 [ 884.665567][T29906] loop2: partition table partially beyond EOD, truncated [ 884.703960][T29906] loop2: p1 start 10 is beyond EOD, truncated [ 884.724066][T29906] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 884.737787][T30042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 884.756330][T29906] loop2: p3 start 225 is beyond EOD, truncated [ 884.770677][T29906] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 884.787705][T29968] loop5: p1 p2 p3 < > p4 [ 884.797016][T29968] loop5: p1 size 526335 extends beyond EOD, truncated 01:53:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) [ 884.808876][T29968] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 884.828448][T29988] loop3: p1 p2 p3 < > p4 [ 884.832979][T29988] loop3: partition table partially beyond EOD, truncated 01:53:34 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 884.890574][T29968] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 884.917780][T29988] loop3: p1 start 10 is beyond EOD, truncated [ 884.951091][T29988] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 884.966678][T29988] loop3: p3 start 225 is beyond EOD, truncated [ 884.973450][T29988] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 884.994637][T30085] loop1: p1 p2 p3 < > p4 01:53:34 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000030a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 885.011004][T30093] print_req_error: 3368 callbacks suppressed [ 885.011015][T30093] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 885.044786][T30085] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 885.061704][T30092] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 885.073734][T29968] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 885.119172][ T2505] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.130599][ T2505] buffer_io_error: 3346 callbacks suppressed [ 885.130607][ T2505] Buffer I/O error on dev loop5p1, logical block 102976, async page read [ 885.145435][ T2505] blk_update_request: I/O error, dev loop5, sector 205964 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.158388][ T2505] Buffer I/O error on dev loop5p1, logical block 102977, async page read 01:53:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf}) [ 885.167015][ T2505] blk_update_request: I/O error, dev loop5, sector 205966 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.179025][ T2505] Buffer I/O error on dev loop5p1, logical block 102978, async page read [ 885.197858][ T2505] blk_update_request: I/O error, dev loop5, sector 205968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.209374][ T2505] Buffer I/O error on dev loop5p1, logical block 102979, async page read [ 885.218426][T30093] blk_update_request: I/O error, dev loop5, sector 206162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 885.229585][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.242341][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 885.250999][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.262147][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read 01:53:35 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000d0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:35 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07090000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 885.270367][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 885.281444][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 885.289659][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 885.298231][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 885.306399][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 885.350178][T30085] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 885.408606][T30202] loop2: p1 < > p2 p3 < > p4 [ 885.419169][T30202] loop2: partition table partially beyond EOD, truncated [ 885.474880][T30202] loop2: p1 start 10 is beyond EOD, truncated [ 885.481969][T30213] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:53:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 885.527269][T30202] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 885.568044][T30209] loop3: p1 p2 p3 < > p4 [ 885.579806][T30209] loop3: partition table partially beyond EOD, truncated 01:53:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}) [ 885.615783][T30202] loop2: p3 start 225 is beyond EOD, truncated [ 885.668602][T30209] loop3: p1 start 10 is beyond EOD, truncated [ 885.698373][T30202] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 885.711284][T30209] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:35 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300006c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:35 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070a0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 885.754303][T30209] loop3: p3 start 225 is beyond EOD, truncated [ 885.782566][T30209] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}) [ 885.965744][T30488] loop5: p1 p2 p3 < > p4 [ 885.970596][T30488] loop5: p1 size 657407 extends beyond EOD, truncated 01:53:35 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000040a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:35 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000e0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 886.026644][T30488] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:53:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 886.071549][T30488] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 886.082949][T30541] loop1: p1 p2 p3 < > p4 [ 886.118631][T30541] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 886.159675][T30541] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070b0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}) 01:53:36 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:36 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 886.394204][T30605] loop2: p1 < > p2 p3 < > p4 [ 886.411542][T30592] loop3: p1 p2 p3 < > p4 [ 886.427932][T30605] loop2: partition table partially beyond EOD, truncated 01:53:36 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000740a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 886.437869][T30592] loop3: partition table partially beyond EOD, truncated [ 886.461558][T30605] loop2: p1 start 10 is beyond EOD, truncated [ 886.503861][T30592] loop3: p1 start 10 is beyond EOD, truncated [ 886.510481][T30605] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 886.527741][T30592] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 886.561232][T30605] loop2: p3 start 225 is beyond EOD, truncated [ 886.596619][T30605] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:36 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) [ 886.610775][T30592] loop3: p3 start 225 is beyond EOD, truncated [ 886.629275][T30592] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 886.632457][T30681] loop5: p1 p2 p3 < > p4 [ 886.652491][T30681] loop5: p1 size 722943 extends beyond EOD, truncated 01:53:36 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000050a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 886.726262][T30681] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 886.745640][T30681] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:36 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 886.778917][T30772] loop1: p1 p2 p3 < > p4 [ 886.796863][T30772] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 886.807122][T30772] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}) [ 886.865737][T30592] __loop_clr_fd: partition scan of loop3 failed (rc=-16) 01:53:36 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300400f0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070c0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:36 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:36 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 887.095307][T30907] loop2: p1 < > p2 p3 < > p4 [ 887.121139][T30907] loop2: partition table partially beyond EOD, truncated [ 887.172845][T30907] loop2: p1 start 10 is beyond EOD, truncated [ 887.189340][T30921] loop5: p1 p2 p3 < > p4 [ 887.194424][T30921] loop5: p1 size 788479 extends beyond EOD, truncated 01:53:37 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) [ 887.220237][T30907] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 887.234223][T30921] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 887.249576][T30927] loop1: p1 p2 p3 < > p4 [ 887.265905][T30927] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 887.279572][T30907] loop2: p3 start 225 is beyond EOD, truncated [ 887.287145][T30921] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 887.303677][T30927] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 887.325318][T30907] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 887.351244][T31029] loop3: p1 p2 p3 < > p4 [ 887.365438][T31029] loop3: partition table partially beyond EOD, truncated 01:53:37 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070d0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:37 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 887.421562][T31029] loop3: p1 start 10 is beyond EOD, truncated [ 887.435768][T31029] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 887.449027][T31029] loop3: p3 start 225 is beyond EOD, truncated [ 887.479258][T31029] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 01:53:37 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000060a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:37 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:37 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000900a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:37 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000110a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 887.875515][T31156] loop5: p1 p2 p3 < > p4 [ 887.896229][T31156] loop5: p1 size 854015 extends beyond EOD, truncated 01:53:37 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00}) [ 887.948384][T31156] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 888.018952][T31238] loop2: p1 < > p2 p3 < > p4 [ 888.027311][T31238] loop2: partition table partially beyond EOD, truncated [ 888.062621][T31238] loop2: p1 start 10 is beyond EOD, truncated [ 888.074582][T31156] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 888.086154][T31166] loop1: p1 p2 p3 < > p4 [ 888.107365][T31238] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 888.124937][T31166] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 888.130851][T31277] loop3: p1 p2 p3 < > p4 [ 888.147186][T31277] loop3: partition table partially beyond EOD, truncated [ 888.175886][T31166] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 888.197938][T31238] loop2: p3 start 225 is beyond EOD, truncated [ 888.204128][T31238] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 888.213036][T31277] loop3: p1 start 10 is beyond EOD, truncated 01:53:38 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:38 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070e0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 888.227264][T31277] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 888.243849][T31277] loop3: p3 start 225 is beyond EOD, truncated 01:53:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}) [ 888.272900][T31277] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:38 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630064ad0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 888.398409][T31238] __loop_clr_fd: partition scan of loop2 failed (rc=-16) 01:53:38 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:38 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000070a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 888.549540][T31402] loop5: p1 p2 p3 < > p4 [ 888.572406][T31402] loop5: p1 size 919551 extends beyond EOD, truncated [ 888.605293][T31433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 888.616486][T31406] loop1: p1 p2 p3 < > p4 01:53:38 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000120a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 888.622623][T31402] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 888.638351][T31406] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0f}) [ 888.681574][T31402] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 888.694974][T31406] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:38 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 888.779707][T31516] loop2: p1 < > p2 p3 < > p4 [ 888.788410][T31516] loop2: partition table partially beyond EOD, truncated [ 888.809602][T31516] loop2: p1 start 10 is beyond EOD, truncated [ 888.896068][T31516] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 888.910464][T31518] loop3: p1 p2 p3 < > p4 01:53:38 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d40a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:38 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07100000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 888.949450][T31518] loop3: partition table partially beyond EOD, truncated 01:53:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 889.010340][T31516] loop2: p3 start 225 is beyond EOD, truncated [ 889.017796][T31596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.039625][T31518] loop3: p1 start 10 is beyond EOD, truncated [ 889.054275][T31516] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 889.104795][T31518] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:39 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 889.206893][T31518] loop3: p3 start 225 is beyond EOD, truncated [ 889.234161][T31518] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 889.309067][T31641] loop5: p1 p2 p3 < > p4 [ 889.316150][T31641] loop5: p1 size 1050623 extends beyond EOD, truncated [ 889.350402][T31637] loop1: p1 p2 p3 < > p4 [ 889.360762][T31637] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:39 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000080a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) [ 889.447828][T31641] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 889.465613][T31637] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 889.477849][T31722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:53:39 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300001f0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 889.531698][T31641] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:39 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d80a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:39 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:39 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07110000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 889.758312][T31769] loop2: p1 < > p2 p3 < > p4 [ 889.787824][T31769] loop2: partition table partially beyond EOD, truncated [ 889.832755][T31769] loop2: p1 start 10 is beyond EOD, truncated 01:53:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 889.887681][T31769] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 889.905400][T31769] loop2: p3 start 225 is beyond EOD, truncated [ 889.913311][T31818] loop3: p1 p2 p3 < > p4 01:53:39 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 889.956451][T31818] loop3: partition table partially beyond EOD, truncated [ 890.032494][T31769] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 890.045187][T31818] loop3: p1 start 10 is beyond EOD, truncated [ 890.085520][T31884] loop1: p1 p2 p3 < > p4 [ 890.091906][T31884] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 890.100192][T31818] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 890.126490][T31884] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 890.138997][T31818] loop3: p3 start 225 is beyond EOD, truncated 01:53:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 890.168670][T31893] loop5: p1 p2 p3 < > p4 [ 890.173330][T31818] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 890.198621][T31893] loop5: p1 size 1116159 extends beyond EOD, truncated 01:53:40 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:53:40 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000090a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 890.222632][T31893] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 890.234950][T31893] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:40 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07120000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:40 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:53:40 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000de0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:40 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000200a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 890.658235][T32038] loop2: p1 < > p2 p3 < > p4 [ 890.679252][T32038] loop2: partition table partially beyond EOD, truncated [ 890.736100][T32131] loop5: p1 p2 p3 < > p4 [ 890.747978][T32038] loop2: p1 start 10 is beyond EOD, truncated [ 890.765925][T32131] loop5: p1 size 1181695 extends beyond EOD, truncated [ 890.767611][T32038] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:40 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 890.800363][T32135] loop1: p1 p2 p3 < > p4 [ 890.812708][T32038] loop2: p3 start 225 is beyond EOD, truncated [ 890.821643][T32135] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 890.823599][T32038] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 890.845093][T32131] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 890.856711][T32135] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 890.869293][T32131] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 890.884541][T32144] loop3: p1 p2 p3 < > p4 [ 890.889117][T32144] loop3: partition table partially beyond EOD, truncated 01:53:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 890.907793][T32144] loop3: p1 start 10 is beyond EOD, truncated [ 890.927365][T32144] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:40 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:53:40 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630002fe0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:40 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 890.973268][T32144] loop3: p3 start 225 is beyond EOD, truncated [ 890.999894][T32144] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 891.049664][T32267] print_req_error: 472 callbacks suppressed [ 891.049677][T32267] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 891.049685][T32266] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 891.049791][ T2504] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.065628][T32131] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 891.071000][ T2504] buffer_io_error: 465 callbacks suppressed [ 891.071009][ T2504] Buffer I/O error on dev loop5p2, logical block 51488, async page read [ 891.082491][T32269] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.090699][ T2504] blk_update_request: I/O error, dev loop5, sector 205956 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.097277][T32269] Buffer I/O error on dev loop5p4, logical block 51488, async page read [ 891.111791][T32269] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 891.122983][ T2504] Buffer I/O error on dev loop5p4, logical block 51489, async page read [ 891.154392][ T2504] blk_update_request: I/O error, dev loop5, sector 205956 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.175497][ T2504] Buffer I/O error on dev loop5p2, logical block 51489, async page read [ 891.179032][T32267] blk_update_request: I/O error, dev loop5, sector 206160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 891.196212][T32266] blk_update_request: I/O error, dev loop5, sector 206160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 891.259642][ T2505] blk_update_request: I/O error, dev loop5, sector 206160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.271553][ T2505] Buffer I/O error on dev loop5p2, logical block 51540, async page read [ 891.280230][ T2505] Buffer I/O error on dev loop5p2, logical block 51541, async page read [ 891.289180][ T2505] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 891.297556][ T2505] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 891.306346][ T2505] Buffer I/O error on dev loop5p2, logical block 2, async page read [ 891.314733][ T2505] Buffer I/O error on dev loop5p2, logical block 3, async page read 01:53:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 01:53:41 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000250a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:41 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07250000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:41 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 891.473684][T32352] loop1: p1 p2 p3 < > p4 [ 891.510588][T32352] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 891.537860][T32378] loop2: p1 < > p2 p3 < > p4 [ 891.554703][T32378] loop2: partition table partially beyond EOD, truncated [ 891.575053][T32378] loop2: p1 start 10 is beyond EOD, truncated [ 891.582775][T32378] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 891.591821][T32378] loop2: p3 start 225 is beyond EOD, truncated [ 891.598690][T32378] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 891.616133][T32352] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 891.660715][T32390] loop3: p1 p2 p3 < > p4 [ 891.679224][T32390] loop3: partition table partially beyond EOD, truncated [ 891.697880][T32390] loop3: p1 start 10 is beyond EOD, truncated 01:53:41 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) [ 891.706863][T32390] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 891.723511][T32390] loop3: p3 start 225 is beyond EOD, truncated [ 891.769790][T32390] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 891.792021][T32389] loop5: p1 p2 p3 < > p4 01:53:41 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000b0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 891.821723][T32389] loop5: p1 size 2426879 extends beyond EOD, truncated 01:53:41 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000fff0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 891.869848][T32389] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 891.885662][T32389] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:41 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) 01:53:41 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07480000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:41 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630003260a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.078435][T32609] loop2: p1 < > p2 p3 < > p4 [ 892.083425][T32609] loop2: partition table partially beyond EOD, truncated [ 892.113775][T32609] loop2: p1 start 10 is beyond EOD, truncated [ 892.120986][T32614] loop1: p1 p2 p3 < > p4 [ 892.126362][T32614] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 892.130339][T32609] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 892.163944][T32609] loop2: p3 start 225 is beyond EOD, truncated 01:53:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 892.186236][T32609] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 892.208632][T32656] loop5: p1 p2 p3 < > p4 [ 892.213712][T32656] loop5: p1 size 4720639 extends beyond EOD, truncated [ 892.233355][T32614] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:42 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) [ 892.259483][T32656] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 892.297300][T32656] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 892.298879][T32726] loop3: p1 p2 p3 < > p4 [ 892.309928][T32726] loop3: partition table partially beyond EOD, truncated 01:53:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 01:53:42 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000000080000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.391666][T32726] loop3: p1 start 10 is beyond EOD, truncated 01:53:42 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) 01:53:42 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.444470][T32726] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 892.462276][T32726] loop3: p3 start 225 is beyond EOD, truncated 01:53:42 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff074c0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.512698][T32726] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:42 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) [ 892.718617][ T379] loop1: p1 p2 p3 < > p4 01:53:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}) [ 892.743700][ T379] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 892.781300][ T425] loop5: p1 p2 p3 < > p4 01:53:42 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) 01:53:42 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300003f0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.788445][ T425] loop5: p1 size 4982783 extends beyond EOD, truncated [ 892.800493][ T379] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 892.832375][ T425] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:53:42 executing program 0: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 892.857956][ T395] loop2: p1 < > p2 p3 < > p4 [ 892.873307][ T425] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 892.882379][ T395] loop2: partition table partially beyond EOD, truncated 01:53:42 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007fffff0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 892.921407][ T395] loop2: p1 start 10 is beyond EOD, truncated [ 892.962062][ T395] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 892.999236][ T395] loop2: p3 start 225 is beyond EOD, truncated [ 893.019364][ T509] loop3: p1 p2 p3 < > p4 [ 893.023851][ T509] loop3: partition table partially beyond EOD, truncated 01:53:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}) [ 893.049684][ T395] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 893.060079][ T509] loop3: p1 start 10 is beyond EOD, truncated [ 893.069646][ T509] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:42 executing program 0: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 893.112030][ T509] loop3: p3 start 225 is beyond EOD, truncated [ 893.136981][ T509] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:43 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07550000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:43 executing program 0: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:53:43 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000d0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 893.268974][ T615] loop1: p1 p2 p3 < > p4 [ 893.292778][ T615] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 893.323708][ T615] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:43 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000400a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}) 01:53:43 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 893.503659][ T741] loop2: p1 < > p2 p3 < > p4 [ 893.518997][ T741] loop2: partition table partially beyond EOD, truncated 01:53:43 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000800000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 893.561421][ T741] loop2: p1 start 10 is beyond EOD, truncated [ 893.592593][ T741] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 893.601291][ T736] loop5: p1 p2 p3 < > p4 01:53:43 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 893.609177][ T736] loop5: p1 size 5572607 extends beyond EOD, truncated [ 893.618977][ T736] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 893.626449][ T741] loop2: p3 start 225 is beyond EOD, truncated [ 893.646650][ T741] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 893.656657][ T736] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 893.669395][ T748] loop3: p1 p2 p3 < > p4 [ 893.674605][ T748] loop3: partition table partially beyond EOD, truncated [ 893.687327][ T748] loop3: p1 start 10 is beyond EOD, truncated 01:53:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) [ 893.716263][ T748] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:43 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:53:43 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000e0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 893.794003][ T748] loop3: p3 start 225 is beyond EOD, truncated [ 893.821583][ T736] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 893.870260][ T748] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:43 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000f400a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 894.011448][ T867] loop1: p1 p2 p3 < > p4 01:53:43 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff075c0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:43 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 894.047989][ T867] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 894.069670][ T867] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) 01:53:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 894.185052][ T867] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 894.278563][ T943] loop2: p1 < > p2 p3 < > p4 [ 894.283428][ T943] loop2: partition table partially beyond EOD, truncated [ 894.306842][ T943] loop2: p1 start 10 is beyond EOD, truncated [ 894.329431][ T943] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 894.349451][ T990] loop3: p1 p2 p3 < > p4 [ 894.358597][ T990] loop3: partition table partially beyond EOD, truncated 01:53:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 894.378031][ T990] loop3: p1 start 10 is beyond EOD, truncated [ 894.385621][ T943] loop2: p3 start 225 is beyond EOD, truncated [ 894.394915][ T990] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 894.410037][ T943] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 01:53:44 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 894.450211][ T990] loop3: p3 start 225 is beyond EOD, truncated [ 894.467655][ T990] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 894.477959][ T1000] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:53:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:53:44 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000100a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:44 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07600000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}) 01:53:44 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000480a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 894.821283][ T1134] loop1: p1 p2 p3 < > p4 [ 894.850785][ T1134] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 894.903876][ T1134] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}) [ 894.993038][ T1239] loop2: p1 < > p2 p3 < > p4 [ 894.998098][ T1235] loop5: p1 p2 p3 < > p4 [ 895.029648][ T1235] loop5: p1 size 6293503 extends beyond EOD, truncated 01:53:44 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 895.034525][ T1239] loop2: partition table partially beyond EOD, truncated [ 895.050804][ T1271] loop3: p1 p2 p3 < > p4 [ 895.067898][ T1271] loop3: partition table partially beyond EOD, truncated [ 895.082910][ T1235] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:53:44 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000103000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 895.098145][ T1239] loop2: p1 start 10 is beyond EOD, truncated [ 895.106441][ T1271] loop3: p1 start 10 is beyond EOD, truncated [ 895.118603][ T1235] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 895.124727][ T1239] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 895.147395][ T1271] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 895.166830][ T1239] loop2: p3 start 225 is beyond EOD, truncated [ 895.175517][ T1271] loop3: p3 start 225 is beyond EOD, truncated [ 895.187062][ T1239] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) close(r0) 01:53:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}) [ 895.203535][ T1271] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 895.278900][ T1235] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:53:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) close(r0) 01:53:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07680000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 895.536666][ T1444] loop1: p1 p2 p3 < > p4 [ 895.560617][ T1444] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 895.589254][ T1444] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:45 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000110a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 01:53:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) close(r0) 01:53:45 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300004c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 895.654413][ T1537] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:53:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff076c0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:45 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) 01:53:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 895.969738][ T1656] loop2: p1 < > p2 p3 < > p4 [ 895.997984][ T1656] loop2: partition table partially beyond EOD, truncated [ 896.021749][ T1656] loop2: p1 start 10 is beyond EOD, truncated [ 896.029716][ T1656] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 896.043812][ T1656] loop2: p3 start 225 is beyond EOD, truncated [ 896.053190][ T1666] loop3: p1 p2 p3 < > p4 [ 896.067649][ T1656] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 896.076147][ T1666] loop3: partition table partially beyond EOD, truncated 01:53:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) [ 896.137964][ T1666] loop3: p1 start 10 is beyond EOD, truncated [ 896.141632][ T1721] loop5: p1 p2 p3 < > p4 [ 896.178062][ T1666] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000}) [ 896.189017][ T1721] loop5: p1 size 7079935 extends beyond EOD, truncated [ 896.216188][ T1733] loop1: p1 p2 p3 < > p4 [ 896.222688][ T1733] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 896.223148][ T1721] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 896.239849][ T1666] loop3: p3 start 225 is beyond EOD, truncated [ 896.247059][ T1666] loop3: p4 size 3657465856 extends beyond EOD, [ 896.254207][ T1666] truncated [ 896.254345][ T1721] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 896.265268][ T1733] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:46 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(0xffffffffffffffff) 01:53:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300009007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:46 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000120a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:46 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07740000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:46 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300005c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e0000}) 01:53:46 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 896.673355][ T1975] loop1: p1 p2 p3 < > p4 [ 896.683816][ T1975] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 896.725304][ T1975] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 896.738180][ T1985] loop3: p1 p2 p3 < > p4 [ 896.742608][ T1985] loop3: partition table partially beyond EOD, truncated 01:53:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 896.799092][ T1980] loop5: p1 p2 p3 < > p4 [ 896.807809][ T1980] loop5: p1 size 7604223 extends beyond EOD, truncated [ 896.818319][ T1985] loop3: p1 start 10 is beyond EOD, truncated [ 896.852002][ T1980] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 896.855451][ T1985] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 896.875979][ T1980] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 896.889621][ T1988] loop2: p1 < > p2 p3 < > p4 [ 896.909854][ T1988] loop2: partition table partially beyond EOD, truncated [ 896.928067][ T1985] loop3: p3 start 225 is beyond EOD, truncated [ 896.947267][ T1985] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000009000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 896.955647][ T1988] loop2: p1 start 10 is beyond EOD, truncated [ 896.974376][ T1988] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:46 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff077a0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 897.031244][ T1988] loop2: p3 start 225 is beyond EOD, truncated [ 897.061721][ T1988] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:47 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000600a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0f0000}) 01:53:47 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 897.237029][ T2131] loop1: p1 p2 p3 < > p4 [ 897.252331][ T2131] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 897.312252][ T2131] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 897.347563][ T2220] loop5: p1 p2 p3 < > p4 [ 897.361421][ T2220] loop5: p1 size 7997439 extends beyond EOD, truncated [ 897.400186][ T2220] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:53:47 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:53:47 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000250a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 897.409233][ T2232] loop3: p1 p2 p3 < > p4 [ 897.425431][ T2220] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 01:53:47 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000020a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 897.457274][ T2232] loop3: partition table partially beyond EOD, truncated [ 897.492560][ T2232] loop3: p1 start 10 is beyond EOD, truncated [ 897.525391][ T2232] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 897.537829][ T2232] loop3: p3 start 225 is beyond EOD, truncated [ 897.544024][ T2232] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 897.614661][ T2344] loop2: p1 < > p2 p3 < > p4 [ 897.630630][ T2344] loop2: partition table partially beyond EOD, truncated 01:53:47 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07900000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 897.677190][ T2344] loop2: p1 start 10 is beyond EOD, truncated 01:53:47 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000680a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:47 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 897.741707][ T2344] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 897.776176][ T2352] loop1: p1 p2 p3 < > p4 [ 897.785602][ T2344] loop2: p3 start 225 is beyond EOD, truncated 01:53:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 897.796897][ T2352] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 897.813746][ T2344] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 897.837201][ T2352] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:47 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000030a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 897.980561][ T2463] loop5: p1 p2 p3 < > p4 [ 898.006526][ T2463] loop5: p1 size 9439231 extends beyond EOD, truncated [ 898.031969][ T2463] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 898.052099][ T2463] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:47 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000480a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:47 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r1, r0, 0x0) [ 898.082981][ T2465] loop3: p1 p2 p3 < > p4 [ 898.095024][ T2465] loop3: partition table partially beyond EOD, truncated 01:53:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 898.126907][ T2465] loop3: p1 start 10 is beyond EOD, truncated [ 898.137006][ T2465] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 898.155373][ T2465] loop3: p3 start 225 is beyond EOD, truncated [ 898.163531][ T2465] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 898.234020][ T2591] loop1: p1 p2 p3 < > p4 01:53:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07d00000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 898.295936][ T2591] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 898.354599][ T2591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 898.389735][ T2603] loop2: p1 < > p2 p3 < > p4 01:53:48 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300006c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 898.398837][ T2603] loop2: partition table partially beyond EOD, truncated [ 898.442517][ T2603] loop2: p1 start 10 is beyond EOD, truncated [ 898.468737][ T2603] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:48 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000040a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 898.529119][ T2603] loop2: p3 start 225 is beyond EOD, truncated [ 898.556310][ T2603] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 898.619030][ T2717] loop5: p1 p2 p3 < > p4 [ 898.629725][ T2717] loop5: p1 size 13633535 extends beyond EOD, truncated 01:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 898.663324][ T2717] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 898.675180][ T2717] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 898.702449][ T2727] loop3: p1 p2 p3 < > p4 [ 898.713860][ T2727] loop3: partition table partially beyond EOD, truncated [ 898.734994][ T2727] loop3: p1 start 10 is beyond EOD, truncated [ 898.745844][ T2727] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 898.756074][ T2727] loop3: p3 start 225 is beyond EOD, truncated 01:53:48 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500004c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 898.762846][ T2727] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 01:53:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07d20000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 898.885985][ T2839] loop1: p1 p2 p3 < > p4 [ 898.900724][ T2839] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:48 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000740a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 898.964733][ T2839] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 899.018701][ T2951] loop2: p1 < > p2 p3 < > p4 [ 899.026030][ T2951] loop2: partition table partially beyond EOD, truncated 01:53:48 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r1, r0, 0x0) [ 899.078395][ T2951] loop2: p1 start 10 is beyond EOD, truncated [ 899.135513][ T2951] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 899.152694][ T3016] loop5: p1 p2 p3 < > p4 [ 899.176716][ T3016] loop5: p1 size 13764607 extends beyond EOD, truncated [ 899.197739][ T2951] loop2: p3 start 225 is beyond EOD, truncated 01:53:49 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000050a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 899.221638][ T3016] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 899.264831][ T2951] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 899.277822][ T3016] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 899.344105][ T3069] loop3: p1 p2 p3 < > p4 [ 899.376662][ T3069] loop3: partition table partially beyond EOD, truncated [ 899.426442][ T3069] loop3: p1 start 10 is beyond EOD, truncated [ 899.437758][ T3069] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 899.456132][ T3213] print_req_error: 4348 callbacks suppressed [ 899.456143][ T3213] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 899.469340][ T3016] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 899.502696][ T3069] loop3: p3 start 225 is beyond EOD, truncated [ 899.509881][ T3215] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 899.510695][ T3204] loop1: p1 p2 p3 < > p4 [ 899.537985][ T2505] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.549122][ T2505] buffer_io_error: 4307 callbacks suppressed [ 899.549130][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.553528][ T2505] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.577616][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.592223][ T3069] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 899.604712][ T2505] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.615909][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.624689][ T2505] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.635887][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.644568][ T2505] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.655734][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.666678][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.677886][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.686221][ T3204] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07ee0000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:49 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500005c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 899.692686][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.707508][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.717283][ T2504] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 899.728433][ T2504] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.760564][ T3204] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 899.769091][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 899.777288][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read 01:53:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 899.848329][ T3308] loop2: p1 < > p2 p3 < > p4 [ 899.855352][ T3308] loop2: partition table partially beyond EOD, truncated [ 899.865048][ T3308] loop2: p1 start 10 is beyond EOD, truncated [ 899.872525][ T3308] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 899.882628][ T3308] loop2: p3 start 225 is beyond EOD, truncated [ 899.890316][ T3308] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 899.900811][ T3306] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:53:49 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 899.954672][ T3204] __loop_clr_fd: partition scan of loop1 failed (rc=-16) 01:53:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 01:53:49 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r1, r0, 0x0) 01:53:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07040200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:50 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000060a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:50 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000600a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 900.303103][ T3475] loop3: p1 p2 p3 < > p4 [ 900.322491][ T3475] loop3: partition table partially beyond EOD, truncated 01:53:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) [ 900.389917][ T3475] loop3: p1 start 10 is beyond EOD, truncated [ 900.429618][ T3475] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 900.472539][ T3475] loop3: p3 start 225 is beyond EOD, truncated [ 900.501192][ T3475] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 900.510925][ T3538] loop5: p1 p2 p3 < > p4 [ 900.535562][ T3538] loop5: p1 size 33818623 extends beyond EOD, truncated [ 900.581745][ T3554] loop1: p1 p2 p3 < > p4 [ 900.590237][ T3538] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 900.611343][ T3554] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 900.620193][ T3595] loop2: p1 < > p2 p3 < > p4 01:53:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) [ 900.625631][ T3538] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 900.630816][ T3595] loop2: partition table partially beyond EOD, truncated [ 900.649204][ T3554] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 900.676874][ T3595] loop2: p1 start 10 is beyond EOD, truncated [ 900.687582][ T3595] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 900.765719][ T3595] loop2: p3 start 225 is beyond EOD, truncated 01:53:50 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000900a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07400200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 900.830716][ T3595] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:50 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000070a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) 01:53:50 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000680a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 901.137779][ T3782] loop3: p1 p2 p3 < > p4 [ 901.143542][ T3782] loop3: partition table partially beyond EOD, truncated [ 901.168603][ T3782] loop3: p1 start 10 is beyond EOD, truncated [ 901.186667][ T3782] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 901.203047][ T3782] loop3: p3 start 225 is beyond EOD, truncated [ 901.210421][ T3833] loop5: p1 p2 p3 < > p4 [ 901.221855][ T3833] loop5: p1 size 37750783 extends beyond EOD, truncated 01:53:51 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) tkill(r0, 0x401004000000016) [ 901.233204][ T3782] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 901.252359][ T3833] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 901.268762][ T3850] loop1: p1 p2 p3 < > p4 01:53:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) [ 901.282298][ T3850] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 901.293669][ T3833] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 901.314245][ T3850] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 901.369491][ T3860] loop2: p1 < > p2 p3 < > p4 [ 901.375188][ T3860] loop2: partition table partially beyond EOD, truncated [ 901.384062][ T3860] loop2: p1 start 10 is beyond EOD, truncated [ 901.393965][ T3860] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:51 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000080a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 901.447237][ T3860] loop2: p3 start 225 is beyond EOD, truncated [ 901.479160][ T3860] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07600200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:51 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d80a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) 01:53:51 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500006c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 901.798095][ T4057] loop1: p1 p2 p3 < > p4 [ 901.829444][ T4057] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 901.886950][ T4057] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 901.919650][ T4089] loop3: p1 p2 p3 < > p4 [ 901.924306][ T4089] loop3: partition table partially beyond EOD, truncated 01:53:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:51 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000090a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 901.960960][ T4089] loop3: p1 start 10 is beyond EOD, truncated [ 901.981470][ T4088] loop5: p1 p2 p3 < > p4 [ 901.991842][ T4088] loop5: p1 size 39847935 extends beyond EOD, truncated [ 901.997652][ T4089] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 902.014986][ T4088] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 902.024748][ T4088] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 902.034293][ T4089] loop3: p3 start 225 is beyond EOD, truncated [ 902.042566][ T4089] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 902.079330][ T4100] loop2: p1 < > p2 p3 < > p4 [ 902.086786][ T4100] loop2: partition table partially beyond EOD, truncated [ 902.167972][ T4100] loop2: p1 start 10 is beyond EOD, truncated [ 902.178049][ T4100] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:52 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) tkill(r0, 0x401004000000016) [ 902.237883][ T4100] loop2: p3 start 225 is beyond EOD, truncated [ 902.275173][ T4100] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07800200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:52 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000fff0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 902.355768][ T4211] loop1: p1 p2 p3 < > p4 01:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) [ 902.398660][ T4211] loop1: p2 size 1073741824 extends beyond EOD, [ 902.409581][ T4211] truncated [ 902.460535][ T4211] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:52 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000740a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}) [ 902.588364][ T4335] loop3: p1 p2 p3 < > p4 [ 902.593096][ T4335] loop3: partition table partially beyond EOD, truncated [ 902.607384][ T4335] loop3: p1 start 10 is beyond EOD, truncated [ 902.614165][ T4335] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 902.678700][ T4335] loop3: p3 start 225 is beyond EOD, truncated [ 902.689964][ T4333] loop5: p1 p2 p3 < > p4 [ 902.694513][ T4333] loop5: p1 size 41945087 extends beyond EOD, truncated [ 902.707879][ T4335] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:52 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 902.787913][ T4333] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 902.818840][ T4333] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 902.899707][ T4446] loop2: p1 < > p2 p3 < > p4 01:53:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07b00200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}) [ 902.934340][ T4446] loop2: partition table partially beyond EOD, truncated [ 902.965813][ T4446] loop2: p1 start 10 is beyond EOD, truncated 01:53:52 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000000010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 902.985991][ T4446] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 903.094621][ T4446] loop2: p3 start 225 is beyond EOD, truncated [ 903.134401][ T4553] loop1: p1 p2 p3 < > p4 [ 903.142169][ T4446] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 903.154103][ T4553] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) [ 903.218059][ T4553] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 903.265616][ T4575] loop5: p1 p2 p3 < > p4 [ 903.274084][ T4575] loop5: p1 size 45090815 extends beyond EOD, truncated 01:53:53 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) tkill(r0, 0x401004000000016) 01:53:53 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000b0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 903.328720][ T4584] loop3: p1 p2 p3 < > p4 [ 903.333283][ T4584] loop3: partition table partially beyond EOD, truncated [ 903.341549][ T4575] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 903.364442][ T4575] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:53 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500007a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 903.403845][ T4584] loop3: p1 start 256 is beyond EOD, truncated [ 903.461794][ T4584] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:53:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 903.552944][ T4584] loop3: p3 start 225 is beyond EOD, truncated [ 903.575030][ T4584] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:53 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007fffff0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 903.701584][ T4738] loop1: p1 p2 p3 < > p4 [ 903.723218][ T4738] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 903.748011][ T4792] loop2: p1 < > p2 p3 < > p4 [ 903.754549][ T4792] loop2: partition table partially beyond EOD, truncated [ 903.769466][ T4738] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 903.807231][ T4792] loop2: p1 start 10 is beyond EOD, truncated [ 903.832886][ T4792] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 903.860008][ T4792] loop2: p3 start 225 is beyond EOD, truncated 01:53:53 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 903.930190][ T4792] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 903.939864][ T4876] loop5: p1 p2 p3 < > p4 [ 903.944865][ T4876] loop5: p1 size 50333695 extends beyond EOD, truncated [ 903.965956][ T4876] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 903.975019][ T4876] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 903.982996][ T4913] loop3: p1 p2 p3 < > p4 [ 903.996486][ T4913] loop3: partition table partially beyond EOD, truncated 01:53:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 904.028624][ T4913] loop3: p1 start 65535 is beyond EOD, truncated [ 904.037809][ T4913] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 904.055415][ T4913] loop3: p3 start 225 is beyond EOD, truncated [ 904.062181][ T4913] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 904.094286][ T4876] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:53:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff072c0300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 904.184358][ T5026] loop1: p1 p2 p3 < > p4 [ 904.198095][ T5026] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:53:54 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000200000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:54 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 904.255217][ T5026] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:54 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:53:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 01:53:54 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000d0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 904.454447][ T5050] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:53:54 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:53:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 01:53:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff072e0300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 904.624231][ T5138] loop3: p1 p2 p3 < > p4 [ 904.629053][ T5144] loop2: p1 < > p2 p3 < > p4 [ 904.633749][ T5144] loop2: partition table partially beyond EOD, truncated [ 904.643719][ T5138] loop3: partition table partially beyond EOD, truncated [ 904.659637][ T5138] loop3: p1 size 2047 extends beyond EOD, truncated [ 904.666877][ T5144] loop2: p1 start 18 is beyond EOD, truncated [ 904.700358][ T5138] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 904.709749][ T5138] loop3: p3 start 225 is beyond EOD, truncated [ 904.716026][ T5144] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 904.723773][ T5138] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 904.732414][ T5144] loop2: p3 start 225 is beyond EOD, truncated [ 904.736335][ T5191] loop1: p1 p2 p3 < > p4 [ 904.747156][ T5191] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 904.766595][ T5144] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 904.801335][ T5191] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}) 01:53:54 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 904.956626][ T5373] print_req_error: 1040 callbacks suppressed [ 904.956636][ T5373] blk_update_request: I/O error, dev loop1, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 904.980444][ T5191] __loop_clr_fd: partition scan of loop1 failed (rc=-16) 01:53:54 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 905.031537][ T2505] blk_update_request: I/O error, dev loop1, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.043040][ T2505] buffer_io_error: 1029 callbacks suppressed [ 905.043049][ T2505] Buffer I/O error on dev loop1p2, logical block 51488, async page read [ 905.076978][ T5365] loop5: p1 p2 p3 < > p4 01:53:54 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000800000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 905.087857][ T2505] blk_update_request: I/O error, dev loop1, sector 205956 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.099225][ T2505] Buffer I/O error on dev loop1p2, logical block 51489, async page read [ 905.099385][ T5373] blk_update_request: I/O error, dev loop1, sector 206160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:53:55 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000e0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:55 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 905.155710][ T2505] blk_update_request: I/O error, dev loop1, sector 206160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.167163][ T2505] Buffer I/O error on dev loop1p2, logical block 51540, async page read [ 905.177260][ T2505] blk_update_request: I/O error, dev loop1, sector 206164 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.189143][ T2505] Buffer I/O error on dev loop1p2, logical block 51541, async page read [ 905.198177][ T5365] loop5: p1 size 53348351 extends beyond EOD, truncated 01:53:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}) [ 905.202787][ T5373] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 905.217258][ T5365] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 905.226532][ T5365] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 905.242664][ T2505] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.253713][ T2505] Buffer I/O error on dev loop1p2, logical block 0, async page read [ 905.267364][ T2504] blk_update_request: I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.279464][ T2504] Buffer I/O error on dev loop1p2, logical block 1, async page read [ 905.291189][ T5484] loop3: p1 p2 p3 < > p4 [ 905.300906][ T5484] loop3: partition table partially beyond EOD, truncated [ 905.308578][ T2505] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 905.319536][ T2505] Buffer I/O error on dev loop1p2, logical block 2, async page read [ 905.335867][ T5484] loop3: p1 size 2047 extends beyond EOD, truncated [ 905.343849][ T2504] Buffer I/O error on dev loop1p2, logical block 3, async page read [ 905.353413][ T2504] Buffer I/O error on dev loop1p2, logical block 51544, async page read [ 905.364935][ T2504] Buffer I/O error on dev loop1p2, logical block 2, async page read [ 905.398283][ T5486] loop2: p1 < > p2 p3 < > p4 [ 905.403157][ T5486] loop2: partition table partially beyond EOD, truncated [ 905.419957][ T5484] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 905.434466][ T5486] loop2: p1 start 37 is beyond EOD, truncated 01:53:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}) 01:53:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff073c0300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 905.443690][ T5486] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 905.451358][ T5484] loop3: p3 start 225 is beyond EOD, truncated [ 905.463967][ T5486] loop2: p3 start 225 is beyond EOD, truncated [ 905.470920][ T5497] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 905.472263][ T5484] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:55 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 905.522366][ T5486] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:55 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000100a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 01:53:55 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000040000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 905.768577][ T5606] loop5: p1 p2 p3 < > p4 [ 905.785507][ T5606] loop5: p1 size 54265855 extends beyond EOD, truncated 01:53:55 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:53:55 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000201000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 905.811770][ T5606] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 905.847677][ T5606] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) [ 906.059914][ T5606] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 906.069521][ T5719] loop1: p1 p2 p3 < > p4 [ 906.085855][ T5719] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 906.104204][ T5719] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 906.126233][ T5728] loop2: p1 < > p2 p3 < > p4 [ 906.131636][ T5728] loop2: partition table partially beyond EOD, truncated [ 906.140454][ T5728] loop2: p1 start 64 is beyond EOD, truncated [ 906.146730][ T5728] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:53:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07b20300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 906.181957][ T5728] loop2: p3 start 225 is beyond EOD, truncated [ 906.217729][ T5728] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:56 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000110a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf}) [ 906.270083][ T5740] loop3: p1 p2 p3 < > p4 [ 906.274465][ T5740] loop3: partition table partially beyond EOD, truncated [ 906.302419][ T5740] loop3: p1 start 1 is beyond EOD, truncated [ 906.310393][ T5740] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 906.318723][ T5740] loop3: p3 start 225 is beyond EOD, truncated [ 906.325028][ T5740] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:56 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000042000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:56 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 906.582904][ T5947] loop5: p1 p2 p3 < > p4 [ 906.593694][ T5945] loop1: p1 p2 p3 < > p4 01:53:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}) [ 906.633972][ T5945] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 906.643462][ T5947] loop5: p1 size 61999103 extends beyond EOD, truncated [ 906.664862][ T5947] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 906.678562][ T5945] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 906.690922][ T5947] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 906.725257][ T5985] loop2: p1 < > p2 p3 < > p4 [ 906.761509][ T5985] loop2: partition table partially beyond EOD, truncated [ 906.812370][ T5985] loop2: p1 start 66 is beyond EOD, truncated 01:53:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07020400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 906.858151][ T6065] loop3: p1 p2 p3 < > p4 [ 906.873058][ T6065] loop3: partition table partially beyond EOD, truncated [ 906.883885][ T5985] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 906.899394][ T6065] loop3: p1 start 3 is beyond EOD, truncated 01:53:56 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000120a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 906.908535][ T5985] loop2: p3 start 225 is beyond EOD, truncated [ 906.913153][ T6065] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 906.936438][ T6065] loop3: p3 start 225 is beyond EOD, truncated [ 906.939270][ T5985] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 906.943346][ T6065] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:53:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}) [ 907.149606][ T6182] loop5: p1 p2 p3 < > p4 [ 907.161891][ T6182] loop5: p1 size 67241983 extends beyond EOD, truncated [ 907.176274][ T6182] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 907.198326][ T6182] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 907.219773][ T6179] loop1: p1 p2 p3 < > p4 [ 907.242024][ T6179] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 907.272137][ T6179] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:53:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:53:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}) 01:53:58 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000103000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:58 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000043000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:58 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07060400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:58 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300001c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) [ 909.137028][ T6422] loop3: p1 p2 p3 < > p4 [ 909.145854][ T6422] loop3: partition table partially beyond EOD, truncated [ 909.158042][ T6420] loop2: p1 < > p2 p3 < > p4 [ 909.167327][ T6420] loop2: partition table partially beyond EOD, truncated [ 909.200764][ T6422] loop3: p1 start 3 is beyond EOD, truncated [ 909.214869][ T6425] loop5: p1 p2 p3 < > p4 [ 909.224112][ T6420] loop2: p1 start 67 is beyond EOD, truncated [ 909.228174][ T6422] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 909.245469][ T6425] loop5: p1 size 67504127 extends beyond EOD, truncated [ 909.254178][ T6422] loop3: p3 start 225 is beyond EOD, truncated [ 909.261093][ T6420] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 909.270367][ T6419] loop1: p1 p2 p3 < > p4 [ 909.279327][ T6419] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 909.295451][ T6425] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 909.304334][ T6420] loop2: p3 start 225 is beyond EOD, truncated [ 909.310953][ T6422] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 909.318677][ T6420] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:53:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}) [ 909.353726][ T6419] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 909.377983][ T6425] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:53:59 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:59 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000250a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:59 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:53:59 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000044000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 909.999251][ T6779] loop5: p1 p2 p3 < > p4 [ 910.004029][ T6779] loop5: p1 size 83888127 extends beyond EOD, truncated [ 910.014632][ T6779] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 910.023187][ T6779] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 910.098416][ T6778] loop2: p1 < > p2 p3 < > p4 [ 910.107327][ T6696] loop3: p1 p2 p3 < > p4 [ 910.111930][ T6696] loop3: partition table partially beyond EOD, truncated [ 910.124069][ T6778] loop2: partition table partially beyond EOD, truncated [ 910.137172][ T6696] loop3: p1 start 7 is beyond EOD, truncated [ 910.145248][ T6764] loop1: p1 p2 p3 < > p4 [ 910.151728][ T6778] loop2: p1 start 68 is beyond EOD, truncated [ 910.160733][ T6764] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 910.168433][ T6696] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 910.175807][ T6778] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 910.188767][ T6764] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 910.201953][ T6696] loop3: p3 start 225 is beyond EOD, truncated [ 910.220828][ T6778] loop2: p3 start 225 is beyond EOD, truncated [ 910.227029][ T6778] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 910.234747][ T6696] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:01 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 01:54:01 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000600ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:01 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000480a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:01 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000009000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:01 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000045000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 912.270816][ T6925] loop2: p1 < > p2 p3 < > p4 [ 912.276629][ T6925] loop2: partition table partially beyond EOD, truncated [ 912.286534][ T6925] loop2: p1 start 69 is beyond EOD, truncated [ 912.295490][ T6925] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 912.305508][ T6925] loop2: p3 start 225 is beyond EOD, truncated [ 912.312305][ T6925] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 912.329713][ T6923] loop3: p1 p2 p3 < > p4 [ 912.334339][ T6923] loop3: partition table partially beyond EOD, truncated [ 912.347674][ T6924] loop5: p1 p2 p3 < > p4 [ 912.363750][ T6923] loop3: p1 start 9 is beyond EOD, [ 912.363879][ T6924] loop5: p1 size 100665343 extends beyond EOD, [ 912.363952][ T6923] truncated [ 912.369930][ T6924] truncated [ 912.387168][ T6923] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 912.396473][ T6941] loop1: p1 p2 p3 < > p4 [ 912.406430][ T6924] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 912.415957][ T6923] loop3: p3 start 225 is beyond EOD, truncated [ 912.430242][ T6923] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 912.438230][ T6924] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 912.453749][ T6941] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 912.478368][ T6941] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:02 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000046000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00}) 01:54:02 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300004c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:02 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07040600ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:02 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000020a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 912.974157][ T7163] loop2: p1 < > p2 p3 < > p4 [ 912.989907][ T7163] loop2: partition table partially beyond EOD, truncated [ 913.017915][ T7163] loop2: p1 start 70 is beyond EOD, truncated [ 913.031373][ T7170] loop5: p1 p2 p3 < > p4 [ 913.049022][ T7163] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 913.060928][ T7170] loop5: p1 size 100927487 extends beyond EOD, truncated [ 913.068890][ T7163] loop2: p3 start 225 is beyond EOD, truncated [ 913.085764][ T7163] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 913.091166][ T7167] loop1: p1 p2 p3 < > p4 [ 913.098328][ T7170] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 913.121474][ T7167] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 913.145634][ T7170] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 913.161572][ T7167] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 913.176628][ T7252] loop3: p1 p2 p3 < > p4 [ 913.181833][ T7252] loop3: partition table partially beyond EOD, truncated [ 913.195256][ T7252] loop3: p1 start 10 is beyond EOD, truncated [ 913.201865][ T7252] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 913.210065][ T7252] loop3: p3 start 225 is beyond EOD, truncated [ 913.216326][ T7252] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:04 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}) 01:54:04 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000700ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:04 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000550a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:04 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000047000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:04 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000030a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0f}) 01:54:05 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 915.358844][ T7432] loop2: p1 < > p2 p3 < > p4 [ 915.363906][ T7432] loop2: partition table partially beyond EOD, truncated [ 915.372044][ T7432] loop2: p1 start 71 is beyond EOD, truncated [ 915.378640][ T7432] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 915.386853][ T7432] loop2: p3 start 225 is beyond EOD, truncated [ 915.394607][ T7432] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 915.411916][ T7430] loop3: p1 p2 p3 < > p4 [ 915.432834][ T7430] loop3: partition table partially beyond EOD, truncated [ 915.479141][ T7430] loop3: p1 start 10 is beyond EOD, truncated [ 915.491797][ T7430] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 915.504356][ T7430] loop3: p3 start 225 is beyond EOD, truncated [ 915.512029][ T7431] loop5: p1 p2 p3 < > p4 [ 915.512574][ T7430] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.540742][ T7431] loop5: p1 size 117442559 extends beyond EOD, truncated [ 915.550180][ T7549] print_req_error: 328 callbacks suppressed [ 915.550191][ T7549] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 915.556537][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.579675][ T7431] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 915.580424][ T2505] buffer_io_error: 322 callbacks suppressed [ 915.580431][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.594501][ T7432] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 915.612122][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.623268][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.637246][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.637593][ T7437] loop1: p1 p2 p3 < > p4 [ 915.648247][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.661108][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.672107][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read 01:54:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 915.685352][ T7431] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 915.689182][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.704481][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.713402][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.724646][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read 01:54:05 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000049000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 915.738770][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.749877][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.758471][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.769939][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.775856][ T7437] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 915.778417][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 915.796941][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.843998][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 915.852472][ T7437] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) 01:54:05 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000900ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:05 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000040a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:05 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300005c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 916.129869][ T7770] loop2: p1 < > p2 p3 < > p4 [ 916.143847][ T7770] loop2: partition table partially beyond EOD, truncated 01:54:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 916.187867][ T7770] loop2: p1 start 73 is beyond EOD, truncated [ 916.195272][ T7770] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 916.226154][ T7770] loop2: p3 start 225 is beyond EOD, truncated [ 916.242956][ T7770] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 916.273026][ T7944] loop3: p1 p2 p3 < > p4 [ 916.280670][ T7944] loop3: partition table partially beyond EOD, truncated [ 916.301883][ T7944] loop3: p1 start 10 is beyond EOD, truncated [ 916.308968][ T7944] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 916.349225][ T7944] loop3: p3 start 225 is beyond EOD, truncated [ 916.367695][ T7944] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 916.422591][ T8021] loop5: p1 p2 p3 < > p4 [ 916.429177][ T8021] loop5: p1 size 150996991 extends beyond EOD, truncated [ 916.438785][ T8021] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 916.450316][ T8021] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 916.518583][ T8027] loop1: p1 p2 p3 < > p4 [ 916.537853][ T8027] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 916.620385][ T8027] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:06 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000a00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:06 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000050a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:06 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004b000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 916.847937][ T8027] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 917.119105][ T8236] loop3: p1 p2 p3 < > p4 [ 917.147675][ T8236] loop3: partition table partially beyond EOD, truncated [ 917.161652][ T8236] loop3: p1 start 10 is beyond EOD, truncated [ 917.168420][ T8236] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 917.176312][ T8236] loop3: p3 start 225 is beyond EOD, truncated [ 917.182922][ T8236] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 917.199906][ T8237] loop5: p1 p2 p3 < > p4 [ 917.204550][ T8237] loop5: p1 size 167774207 extends beyond EOD, truncated [ 917.216987][ T8237] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 917.226530][ T8237] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 917.256590][ T8233] loop2: p1 < > p2 p3 < > p4 [ 917.287670][ T8233] loop2: partition table partially beyond EOD, truncated [ 917.298164][ T8233] loop2: p1 start 75 is beyond EOD, truncated [ 917.345570][ T8233] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 917.376757][ T8233] loop2: p3 start 225 is beyond EOD, truncated [ 917.393669][ T8233] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:08 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:08 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000600a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 01:54:08 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000b00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:08 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000060a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:08 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004d000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 918.728693][ T8359] loop2: p1 < > p2 p3 < > p4 [ 918.738017][ T8359] loop2: partition table partially beyond EOD, truncated [ 918.760228][ T8359] loop2: p1 start 77 is beyond EOD, truncated [ 918.766738][ T8359] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 918.777119][ T8359] loop2: p3 start 225 is beyond EOD, truncated [ 918.783962][ T8359] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 918.857768][ T8373] loop3: p1 p2 p3 < > p4 [ 918.862366][ T8373] loop3: partition table partially beyond EOD, truncated [ 918.878016][ T8373] loop3: p1 start 10 is beyond EOD, truncated [ 918.907566][ T8373] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 918.931013][ T8373] loop3: p3 start 225 is beyond EOD, truncated [ 918.945809][ T8373] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 918.970969][ T8364] loop5: p1 p2 p3 < > p4 [ 918.979601][ T8364] loop5: p1 size 184551423 extends beyond EOD, truncated [ 918.993378][ T8359] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 919.003302][ T8364] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 919.011290][ T8361] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 919.042073][ T8364] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 01:54:09 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004e000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:09 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000070a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:09 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000680a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:09 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 919.568721][ T8615] loop3: p1 p2 p3 < > p4 [ 919.573651][ T8615] loop3: partition table partially beyond EOD, truncated [ 919.588318][ T8615] loop3: p1 start 10 is beyond EOD, truncated [ 919.595558][ T8615] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 919.605348][ T8615] loop3: p3 start 225 is beyond EOD, truncated [ 919.612636][ T8615] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 919.702814][ T8613] loop1: p1 p2 p3 < > p4 [ 919.708740][ T8613] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 919.717945][ T8613] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 919.737041][ T8648] loop5: p1 p2 p3 < > p4 [ 919.742444][ T8612] loop2: p1 < > p2 p3 < > p4 [ 919.747304][ T8612] loop2: partition table partially beyond EOD, truncated [ 919.784579][ T8648] loop5: p1 size 201328639 extends beyond EOD, truncated [ 919.802125][ T8612] loop2: p1 start 78 is beyond EOD, truncated [ 919.811244][ T8612] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 919.823527][ T8612] loop2: p3 start 225 is beyond EOD, truncated [ 919.834482][ T8612] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 919.835271][ T8648] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 919.908165][ T8648] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 919.959009][ T8612] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 920.682123][ T8784] print_req_error: 5264 callbacks suppressed [ 920.682135][ T8784] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 920.747049][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.758220][ T2505] buffer_io_error: 5226 callbacks suppressed [ 920.758228][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.773527][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.785139][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.803859][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.815573][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.824078][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.835347][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.843629][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.854691][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.863559][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.874536][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.885699][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.897328][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.906097][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.918128][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.926952][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 920.938140][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 920.946570][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read 01:54:11 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 01:54:11 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300006c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:11 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000080a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:11 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004f000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:11 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000d00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 921.698260][ T8840] loop3: p1 p2 p3 < > p4 [ 921.707205][ T8840] loop3: partition table partially beyond EOD, truncated [ 921.736171][ T8840] loop3: p1 start 10 is beyond EOD, truncated 01:54:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 921.749298][ T8840] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 921.759204][ T8840] loop3: p3 start 225 is beyond EOD, truncated [ 921.765654][ T8840] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.826233][ T8846] loop1: p1 p2 p3 < > p4 [ 921.833816][ T8841] loop5: p1 p2 p3 < > p4 [ 921.841465][ T8846] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 921.861019][ T8844] loop2: p1 < > p2 p3 < > p4 [ 921.874309][ T8841] loop5: p1 size 218105855 extends beyond EOD, truncated [ 921.883785][ T8846] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 921.890497][ T8844] loop2: partition table partially beyond EOD, truncated [ 921.917995][ T8841] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 921.925829][ T8844] loop2: p1 start 79 is beyond EOD, truncated [ 921.939138][ T8844] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 921.956700][ T8841] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:11 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000090a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 921.965866][ T8844] loop2: p3 start 225 is beyond EOD, truncated [ 921.975822][ T8844] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:11 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000740a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 922.109733][ T8844] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 922.119113][ T8841] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:54:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 01:54:12 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000052000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 922.354400][ T9174] loop3: p1 p2 p3 < > p4 [ 922.364159][ T9174] loop3: partition table partially beyond EOD, truncated [ 922.388005][ T9174] loop3: p1 start 10 is beyond EOD, truncated [ 922.395183][ T9174] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 922.405988][ T9184] loop1: p1 p2 p3 < > p4 [ 922.419956][ T9184] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 922.438368][ T9174] loop3: p3 start 225 is beyond EOD, truncated [ 922.449383][ T9174] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 922.456770][ T9184] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 922.466956][ T9269] loop2: p1 < > p2 p3 < > p4 [ 922.485839][ T9269] loop2: partition table partially beyond EOD, truncated [ 922.527864][ T9269] loop2: p1 start 82 is beyond EOD, truncated [ 922.534299][ T9269] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 922.545392][ T9269] loop2: p3 start 225 is beyond EOD, truncated [ 922.551795][ T9269] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:14 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000e00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:14 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}) 01:54:14 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000053000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:14 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:14 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) [ 924.739624][ T9326] loop3: p1 p2 p3 < > p4 [ 924.744480][ T9326] loop3: partition table partially beyond EOD, truncated [ 924.752177][ T9326] loop3: p1 start 10 is beyond EOD, truncated [ 924.759270][ T9326] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 924.767387][ T9326] loop3: p3 start 225 is beyond EOD, truncated [ 924.775179][ T9326] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}) [ 924.822386][ T9328] loop5: p1 p2 p3 < > p4 [ 924.830599][ T9328] loop5: p1 size 234883071 extends beyond EOD, truncated [ 924.839229][ T9328] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 924.848437][ T9328] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 924.912302][ T9327] loop1: p1 p2 p3 < > p4 [ 924.924240][ T9327] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 924.945002][ T9327] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 924.963783][ T9324] loop2: p1 < > p2 p3 < > p4 [ 924.976140][ T9324] loop2: partition table partially beyond EOD, truncated 01:54:14 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07400f00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 925.016378][ T9324] loop2: p1 start 83 is beyond EOD, truncated [ 925.043947][ T9324] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:15 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d40a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:15 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000b0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 925.118501][ T9324] loop2: p3 start 225 is beyond EOD, truncated [ 925.141360][ T9324] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}) 01:54:15 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000055000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 925.433633][ T9518] loop5: p1 p2 p3 < > p4 [ 925.449319][ T9518] loop5: p1 size 255854591 extends beyond EOD, truncated [ 925.468691][ T9542] loop1: p1 p2 p3 < > p4 [ 925.480412][ T9518] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 925.488280][ T9542] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 925.521335][ T9518] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 925.538032][ T9565] loop3: p1 p2 p3 < > p4 [ 925.542511][ T9565] loop3: partition table partially beyond EOD, truncated [ 925.551620][ T9542] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 925.567141][ T9565] loop3: p1 start 10 is beyond EOD, truncated [ 925.601406][ T9565] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:54:15 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) [ 925.655210][ T9565] loop3: p3 start 225 is beyond EOD, truncated [ 925.669206][ T9565] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:15 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001100ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 925.798528][ T9587] loop2: p1 < > p2 p3 < > p4 [ 925.811023][ T9587] loop2: partition table partially beyond EOD, truncated [ 925.828181][ T9587] loop2: p1 start 85 is beyond EOD, truncated [ 925.889075][ T9587] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:15 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d80a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 925.930776][ T9587] loop2: p3 start 225 is beyond EOD, truncated [ 925.967698][ T9587] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:15 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) [ 926.098311][ T9801] print_req_error: 830 callbacks suppressed [ 926.098323][ T9801] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 926.115813][ T9587] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 926.135068][ T9805] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:54:16 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000056000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 926.189676][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.200818][ T2505] buffer_io_error: 815 callbacks suppressed [ 926.200832][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.216265][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.220572][ T9803] loop5: p1 p2 p3 < > p4 [ 926.227286][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.248861][ T9803] loop5: p1 size 285214719 extends beyond EOD, truncated [ 926.255082][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.267061][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.276336][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.287263][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.295735][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.295749][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.315108][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.326057][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.334191][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:54:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 926.345296][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 926.354280][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 926.365239][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.373852][ T9803] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 926.373991][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 926.389129][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 926.402863][ T9807] loop1: p1 p2 p3 < > p4 [ 926.414875][ T9807] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 926.432813][ T9803] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 926.444505][ T9807] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 926.514972][ T9918] loop2: p1 < > p2 p3 < > p4 [ 926.522293][ T9918] loop2: partition table partially beyond EOD, truncated [ 926.533999][ T9918] loop2: p1 start 86 is beyond EOD, truncated [ 926.540366][ T9872] loop3: p1 p2 p3 < > p4 [ 926.546767][ T9872] loop3: partition table partially beyond EOD, truncated 01:54:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}) 01:54:16 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000de0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 926.565176][ T9872] loop3: p1 start 10 is beyond EOD, truncated [ 926.577860][ T9872] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 926.580346][ T9918] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 926.607230][ T9872] loop3: p3 start 225 is beyond EOD, truncated 01:54:16 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 926.613793][ T9872] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 926.649475][ T9918] loop2: p3 start 225 is beyond EOD, truncated [ 926.669910][ T9918] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:16 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) [ 926.828997][T10033] loop1: p1 p2 p3 < > p4 01:54:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}) 01:54:16 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500003559000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:16 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000d0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 926.863721][T10033] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 926.897032][T10033] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 926.981133][T10084] loop5: p1 p2 p3 < > p4 01:54:16 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 927.032949][T10084] loop5: p1 size 301991935 extends beyond EOD, truncated [ 927.057659][T10084] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 927.119491][T10084] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}) [ 927.261577][T10084] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 927.298959][T10169] loop3: p1 p2 p3 < > p4 [ 927.314716][T10169] loop3: partition table partially beyond EOD, truncated [ 927.328233][T10184] loop2: p1 < > p2 p3 < > p4 [ 927.332922][T10184] loop2: partition table partially beyond EOD, truncated [ 927.342818][T10169] loop3: p1 start 10 is beyond EOD, truncated [ 927.350303][T10169] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 927.358128][T10184] loop2: p1 start 89 is beyond EOD, truncated [ 927.364206][T10184] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 927.372349][T10169] loop3: p3 start 225 is beyond EOD, truncated [ 927.397287][T10211] loop1: p1 p2 p3 < > p4 [ 927.407837][T10184] loop2: p3 start 225 is beyond EOD, truncated [ 927.431029][T10169] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 927.450900][T10211] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:54:17 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001f00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 927.496632][T10184] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 927.543390][T10211] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:17 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 01:54:17 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000e0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:17 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000355a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:17 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 927.852064][T10372] loop5: p1 p2 p3 < > p4 [ 927.875434][T10372] loop5: p1 size 520095743 extends beyond EOD, truncated [ 927.915615][T10372] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 927.934050][T10372] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 927.958129][T10400] loop3: p1 p2 p3 < > p4 [ 927.962602][T10400] loop3: partition table partially beyond EOD, truncated [ 927.974337][T10400] loop3: p1 start 10 is beyond EOD, truncated [ 927.994635][T10400] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:54:17 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 928.033894][T10400] loop3: p3 start 225 is beyond EOD, truncated [ 928.055406][T10400] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 928.058978][T10394] loop1: p1 p2 p3 < > p4 [ 928.091421][T10432] loop2: p1 < > p2 p3 < > p4 [ 928.111997][T10394] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 928.128640][T10432] loop2: partition table partially beyond EOD, truncated [ 928.150661][T10432] loop2: p1 start 90 is beyond EOD, truncated 01:54:18 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07002000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 928.169869][T10432] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 928.202603][T10432] loop2: p3 start 225 is beyond EOD, truncated [ 928.210363][T10394] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 928.286047][T10432] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:18 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000100a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:18 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) 01:54:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000}) 01:54:18 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000040000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:18 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 928.430013][T10527] loop5: p1 p2 p3 < > p4 [ 928.434837][T10527] loop5: p1 size 536872959 extends beyond EOD, truncated [ 928.447186][T10527] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 928.456024][T10527] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:18 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07002500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:18 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000355c000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:18 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 928.660546][T10639] loop3: p1 p2 p3 < > p4 [ 928.664948][T10639] loop3: partition table partially beyond EOD, truncated [ 928.750372][T10639] loop3: p1 start 10 is beyond EOD, truncated 01:54:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e0000}) 01:54:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) [ 928.804555][T10639] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 928.818696][T10649] loop1: p1 p2 p3 < > p4 [ 928.825663][T10649] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 928.867042][T10649] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 928.875140][T10639] loop3: p3 start 225 is beyond EOD, truncated [ 928.882183][T10639] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 928.927152][T10688] loop2: p1 < > p2 p3 < > p4 [ 928.934650][T10688] loop2: partition table partially beyond EOD, truncated [ 928.973833][T10688] loop2: p1 start 92 is beyond EOD, truncated [ 928.990637][T10688] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:18 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000110a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 929.069337][T10765] loop5: p1 p2 p3 < > p4 [ 929.077193][T10688] loop2: p3 start 225 is beyond EOD, truncated [ 929.096805][T10765] loop5: p1 size 620759039 extends beyond EOD, truncated 01:54:18 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300003542000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 929.128874][T10765] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 929.151584][T10765] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 929.160290][T10688] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 01:54:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07032c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 929.432519][T10903] loop1: p1 p2 p3 < > p4 01:54:19 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500006b5d000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 929.468634][T10899] loop3: p1 p2 p3 < > p4 [ 929.473475][T10903] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 929.482641][T10899] loop3: partition table partially beyond EOD, truncated [ 929.535498][T10899] loop3: p1 start 10 is beyond EOD, truncated [ 929.553836][T10903] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 929.569242][T10899] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:54:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0f0000}) [ 929.639701][T10899] loop3: p3 start 225 is beyond EOD, truncated [ 929.650012][T10899] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 929.695190][T10903] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 929.738158][T11029] loop2: p1 < > p2 p3 < > p4 [ 929.743049][T11029] loop2: partition table partially beyond EOD, truncated [ 929.777917][T11029] loop2: p1 start 93 is beyond EOD, truncated 01:54:19 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300003543000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 929.785282][T11029] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 929.794224][T11033] loop5: p1 p2 p3 < > p4 [ 929.812241][T11033] loop5: p1 size 738396159 extends beyond EOD, truncated [ 929.821610][T11029] loop2: p3 start 225 is beyond EOD, truncated [ 929.831182][T11033] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:54:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) [ 929.834322][T11029] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 929.865148][T10899] __loop_clr_fd: partition scan of loop3 failed (rc=-16) 01:54:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 929.887714][T11033] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:19 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000120a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:19 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000061000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07032e00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 930.208226][T11160] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) 01:54:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x2000) ioctl$KDSKBLED(r2, 0x4b65, 0x5) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x2}) [ 930.297172][T11245] loop3: p1 p2 p3 < > p4 [ 930.314435][T11245] loop3: partition table partially beyond EOD, truncated 01:54:20 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300003544000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 930.379281][T11245] loop3: p1 start 10 is beyond EOD, truncated [ 930.387284][T11245] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 930.396835][T11285] loop5: p1 p2 p3 < > p4 [ 930.403073][T11285] loop5: p1 size 771950591 extends beyond EOD, truncated [ 930.413852][T11245] loop3: p3 start 225 is beyond EOD, truncated [ 930.426506][T11285] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 930.434628][T11245] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 930.446116][T11290] loop2: p1 < > p2 p3 < > p4 [ 930.451392][T11290] loop2: partition table partially beyond EOD, truncated [ 930.464647][T11285] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 930.479399][T11290] loop2: p1 start 97 is beyond EOD, truncated [ 930.511478][T11290] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400300, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) [ 930.548491][T11290] loop2: p3 start 225 is beyond EOD, truncated [ 930.579195][T11290] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:20 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000250a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 930.715187][T11380] loop1: p1 p2 p3 < > p4 01:54:20 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07033c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 930.764469][T11380] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 930.774035][T11380] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:54:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc080, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0xffffff03) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 01:54:20 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300006b45000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:20 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000062000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 931.032296][T11452] loop3: p1 p2 p3 < > p4 [ 931.036851][T11452] loop3: partition table partially beyond EOD, truncated [ 931.063966][T11452] loop3: p1 start 10 is beyond EOD, truncated [ 931.071315][T11524] loop5: p1 p2 p3 < > p4 [ 931.082754][T11524] loop5: p1 size 1006831615 extends beyond EOD, truncated [ 931.111762][T11452] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 931.126575][T11524] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 931.150269][T11537] loop1: p1 p2 p3 < > p4 [ 931.151151][T11452] loop3: p3 start 225 is beyond EOD, truncated [ 931.167867][T11452] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x48ea2b87c139596e, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/144) [ 931.180144][T11524] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 931.193587][T11537] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 931.214163][T11537] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 931.232708][T11542] loop2: p1 < > p2 p3 < > p4 [ 931.237686][T11542] loop2: partition table partially beyond EOD, truncated [ 931.245128][T11542] loop2: p1 start 98 is beyond EOD, truncated [ 931.251737][T11542] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 931.292699][T11542] loop2: p3 start 225 is beyond EOD, truncated 01:54:21 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 931.377677][T11542] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:21 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07003f00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:21 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000480a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) modify_ldt$write(0x1, &(0x7f00000000c0)={0xf3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:21 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 931.695720][T11710] loop1: p1 p2 p3 < > p4 [ 931.710690][T11710] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 931.749706][T11710] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 931.787569][T11778] loop5: p1 p2 p3 < > p4 [ 931.795861][T11778] loop5: p1 size 1056966655 extends beyond EOD, truncated [ 931.819326][T11778] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 931.826845][T11789] loop3: p1 p2 p3 < > p4 [ 931.831646][T11789] loop3: partition table partially beyond EOD, truncated 01:54:21 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0xfffffff7, {{0x2, 0x1000, @broadcast}}}, 0x88) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x1}) r1 = syz_open_pts(r0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 931.854155][T11778] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 931.877821][T11789] loop3: p1 start 10 is beyond EOD, truncated [ 931.893700][T11789] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 931.954277][T11789] loop3: p3 start 225 is beyond EOD, truncated 01:54:21 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 932.003892][T11789] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:21 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000399000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 932.117947][T11897] loop2: p1 < > p2 p3 < > p4 [ 932.122658][T11897] loop2: partition table partially beyond EOD, truncated 01:54:22 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0xf643b3506c223555) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)="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") fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='+bdevmd5sum:vboxnet1^\x00', &(0x7f0000000140)='./file0\x00', r5) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 932.220256][T11897] loop2: p1 start 100 is beyond EOD, truncated [ 932.258547][T11897] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:22 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300004c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 932.382381][T11897] loop2: p3 start 225 is beyond EOD, truncated [ 932.397577][T11897] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 932.436000][T12031] loop1: p1 p2 p3 < > p4 01:54:22 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 932.458508][T12031] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 932.516397][T12031] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) fadvise64(r3, 0x0, 0x4d6, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:22 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000066000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 932.669214][T12048] loop5: p1 p2 p3 < > p4 [ 932.684629][T12048] loop5: p1 size 1073743871 extends beyond EOD, truncated 01:54:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x81}) [ 932.713642][T12048] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 932.724811][T12048] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 932.806020][T12080] loop3: p1 p2 p3 < > p4 [ 932.832752][T12080] loop3: partition table partially beyond EOD, truncated [ 932.867374][T12048] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:54:22 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000039b000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 932.880782][T12080] loop3: p1 start 10 is beyond EOD, truncated [ 932.908775][T12080] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 932.909178][T12270] print_req_error: 1913 callbacks suppressed [ 932.909189][T12270] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 932.937049][T12180] loop2: p1 < > p2 p3 < > p4 [ 932.948540][T12080] loop3: p3 start 225 is beyond EOD, truncated [ 932.951108][T12180] loop2: partition table partially beyond EOD, truncated 01:54:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07024000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 933.006988][T12080] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 933.017204][T12180] loop2: p1 start 102 is beyond EOD, truncated 01:54:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x6}) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r3 = fsopen(&(0x7f0000000100)='exofs\x00', 0x70b38db9803b673e) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0xdb26a73b5b78a554) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 933.061606][ T2504] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.066829][T12180] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 933.073509][ T2504] buffer_io_error: 1890 callbacks suppressed [ 933.073517][ T2504] Buffer I/O error on dev loop5p1, logical block 102976, async page read [ 933.096269][T12180] loop2: p3 start 225 is beyond EOD, truncated [ 933.096813][ T2504] blk_update_request: I/O error, dev loop5, sector 205964 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.107796][T12180] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 933.114405][ T2504] Buffer I/O error on dev loop5p1, logical block 102977, async page read [ 933.130121][ T2504] blk_update_request: I/O error, dev loop5, sector 205966 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.141587][ T2504] Buffer I/O error on dev loop5p1, logical block 102978, async page read [ 933.160262][ T2505] blk_update_request: I/O error, dev loop5, sector 205968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.171698][ T2505] Buffer I/O error on dev loop5p1, logical block 102979, async page read [ 933.183688][T12270] blk_update_request: I/O error, dev loop5, sector 206162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 933.195699][ T2505] blk_update_request: I/O error, dev loop5, sector 206162 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.207118][ T2505] Buffer I/O error on dev loop5p1, logical block 103076, async page read [ 933.212030][ T2505] blk_update_request: I/O error, dev loop5, sector 206164 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.227001][ T2505] Buffer I/O error on dev loop5p1, logical block 103077, async page read [ 933.240484][ T2505] blk_update_request: I/O error, dev loop5, sector 206166 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.251876][ T2505] Buffer I/O error on dev loop5p1, logical block 103078, async page read [ 933.260573][ T2505] blk_update_request: I/O error, dev loop5, sector 206168 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.271948][ T2505] Buffer I/O error on dev loop5p1, logical block 103079, async page read [ 933.280874][ T2505] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 933.288960][ T2505] Buffer I/O error on dev loop5p1, logical block 1, async page read [ 933.393584][T12347] loop1: p1 p2 p3 < > p4 01:54:23 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:23 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300005c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 933.433710][T12347] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 933.449479][T12347] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:23 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000067000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f00000000c0)={0x5, 0x1}) [ 933.529224][T12443] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:54:23 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000007c8000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:23 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070f4000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 933.808797][T12603] loop2: p1 < > p2 p3 < > p4 [ 933.813602][T12603] loop2: partition table partially beyond EOD, truncated [ 933.827438][T12603] loop2: p1 start 103 is beyond EOD, truncated 01:54:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 933.853370][T12603] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 933.873587][T12605] loop3: p1 p2 p3 < > p4 [ 933.885232][T12605] loop3: partition table partially beyond EOD, truncated [ 933.898524][T12603] loop2: p3 start 225 is beyond EOD, truncated [ 933.927922][T12605] loop3: p1 start 10 is beyond EOD, truncated [ 933.953389][T12603] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 933.971731][T12605] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 933.988812][T12725] loop5: p1 p2 p3 < > p4 [ 933.993470][T12725] loop5: p1 size 1074726911 extends beyond EOD, truncated [ 934.001751][T12605] loop3: p3 start 225 is beyond EOD, truncated 01:54:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCCBRK(r0, 0x5428) [ 934.027851][T12725] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 934.031529][T12605] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.066525][T12725] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 934.120640][T12729] loop1: p1 p2 p3 < > p4 [ 934.129768][T12729] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 934.158320][T12729] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:24 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000600a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:24 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004800ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x5e0d}) syz_open_pts(r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x80}) 01:54:24 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000007cd000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:24 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:24 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000068000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 934.618515][T12952] loop3: p1 p2 p3 < > p4 [ 934.626062][T12952] loop3: partition table partially beyond EOD, truncated [ 934.669240][T12953] loop5: p1 p2 p3 < > p4 [ 934.685234][T12952] loop3: p1 start 10 is beyond EOD, truncated [ 934.696173][T12953] loop5: p1 size 1207961599 extends beyond EOD, truncated 01:54:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1f) r5 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$KDADDIO(r5, 0x4b34, 0x7ff) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 934.712927][T12953] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 934.736146][T12952] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 934.746168][T12953] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 934.754335][T12952] loop3: p3 start 225 is beyond EOD, truncated [ 934.760991][T12952] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.772332][T12974] loop1: p1 p2 p3 < > p4 [ 934.794443][T12974] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 934.803459][T12974] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 934.825024][T12991] loop2: p1 < > p2 p3 < > p4 [ 934.838772][T12991] loop2: partition table partially beyond EOD, truncated [ 934.845988][T12991] loop2: p1 start 104 is beyond EOD, truncated 01:54:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0xfffc, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x3d}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000000c0)=0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:24 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 934.921877][T12991] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:24 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000a7e2000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:24 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000680a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 935.028073][T12991] loop2: p3 start 225 is beyond EOD, truncated [ 935.034268][T12991] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0xfffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:25 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000069000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 935.274030][T13099] loop5: p1 p2 p3 < > p4 [ 935.279481][T13099] loop5: p1 size 1275070463 extends beyond EOD, truncated [ 935.310859][T13099] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 935.354585][T13099] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 935.397292][T13206] loop1: p1 p2 p3 < > p4 [ 935.408342][T13206] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 935.427316][T13206] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 935.447674][T13208] loop3: p1 p2 p3 < > p4 01:54:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 935.472381][T13208] loop3: partition table partially beyond EOD, truncated 01:54:25 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07005500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 935.527290][T13253] loop2: p1 < > p2 p3 < > p4 [ 935.546245][T13208] loop3: p1 start 10 is beyond EOD, truncated [ 935.550415][T13253] loop2: partition table partially beyond EOD, truncated 01:54:25 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000001ed000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 935.613169][T13208] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 935.644480][T13208] loop3: p3 start 225 is beyond EOD, truncated [ 935.654503][T13253] loop2: p1 start 105 is beyond EOD, truncated 01:54:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 935.670006][T13253] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 935.678014][T13208] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 935.686512][T13253] loop2: p3 start 225 is beyond EOD, truncated [ 935.693784][T13253] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x1, 0x9, 0x6, 0x80, 0x0, 0xfffffffeffffffff, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x12af, 0x4, @perf_config_ext={0x4, 0x9}, 0x140, 0x80000001, 0xbc8, 0x2, 0xf1b8, 0x9, 0x1}, r4, 0x7, r7, 0x0) r8 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x15, 0x4) ioctl$TCSETSF(r8, 0x5412, &(0x7f0000000040)) 01:54:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 935.867928][T13338] loop1: p1 p2 p3 < > p4 [ 935.879112][T13338] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 935.892362][T13338] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 935.913193][T13253] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 935.927843][T13336] loop5: p1 p2 p3 < > p4 [ 935.932802][T13336] loop5: p1 size 1426065407 extends beyond EOD, truncated [ 935.971585][T13336] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:54:25 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300006c0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 936.036352][T13336] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:26 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000ffff7f0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:26 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000006d000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0x81}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:26 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07005c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:26 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 936.358636][T13570] loop3: p1 p2 p3 < > p4 [ 936.363134][T13570] loop3: partition table partially beyond EOD, truncated [ 936.385348][T13570] loop3: p1 start 10 is beyond EOD, truncated [ 936.399809][T13570] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 936.408219][T13570] loop3: p3 start 225 is beyond EOD, truncated [ 936.414843][T13570] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 936.438721][T13577] loop1: p1 p2 p3 < > p4 [ 936.444352][T13577] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:54:26 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 936.475618][T13577] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 936.539107][T13578] loop2: p1 < > p2 p3 < > p4 01:54:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700005700000000000000a39500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r1, 0x0, 0x0, 0x0}, 0x30) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) fgetxattr(r5, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)=""/45, 0x2d) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x200}) r6 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)) [ 936.567529][T13578] loop2: partition table partially beyond EOD, truncated [ 936.600415][T13578] loop2: p1 start 109 is beyond EOD, truncated [ 936.612765][T13587] loop5: p1 p2 p3 < > p4 01:54:26 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000002000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:26 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:26 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000740a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 936.623049][T13587] loop5: p1 size 1543505919 extends beyond EOD, truncated [ 936.630047][T13578] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 936.643072][T13587] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 936.661892][T13578] loop2: p3 start 225 is beyond EOD, truncated [ 936.703969][T13578] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 936.730857][T13587] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x3, 0x4ba, [0x0, 0x200001c0, 0x2000040c, 0x2000043c], 0x0, &(0x7f0000000100), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0x6b9baa257efed014, 0x2, [{0xa581f5257a2e3dec, 0x1, 0x1d641, 'rose0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x80, 0x7f, 0xff], @link_local, [0x80, 0x17e, 0x0, 0x0, 0xff, 0x1fe], 0x6e, 0xe6, 0x15e, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x7f}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}], @common=@nflog={'nflog\x00', 0x50, {{0xffff, 0x401, 0x7, 0x0, 0x0, "d9d1c4bee604ed97e14a3d6c9737a54d75558063f7bcd767ad6d21216fedfb1faaacb93866423d4594c6048d6b08e423ddceafa0e996b732c1ae00a35c4ec2d8"}}}}, {0x9b83893522452243, 0x8, 0xcb3b, 'vlan0\x00', 'nr0\x00', 'batadv0\x00', 'yam0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x7f, 0x0, 0x0, 0x7f, 0x1fe, 0xff], @dev={[], 0x29}, [0xff, 0x0, 0xff, 0x0, 0x101, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', 0x26a}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xf8e9550c32d6d9b4, 0x1, [{0x1, 0x66, 0x8884, 'bridge_slave_0\x00', 'team0\x00', 'ip6gre0\x00', 'veth1_to_bond\x00', @random="6a2cb520044a", [0x0, 0x0, 0x0, 0xff, 0x21ef5fe53be7b361, 0x1cc0800d084f6eb5], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0x156, 0x1a6, 0x1de, [@physdev={'physdev\x00', 0x70, {{'vxcan1\x00', {0xff}, 'ip6tnl0\x00', {0xff}, 0x8, 0x2}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x1b}, [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x4e23, 0x0, 0x3, 0x4e22, 0x4, 0x20}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x6, 0x5}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x532) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000140)) 01:54:26 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:26 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:26 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000072000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 936.898870][T13708] loop1: p1 p2 p3 < > p4 [ 936.917650][T13708] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 936.979342][T13708] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 937.010542][T13715] loop3: p1 p2 p3 < > p4 [ 937.021655][T13715] loop3: partition table partially beyond EOD, truncated [ 937.079807][T13715] loop3: p1 start 10 is beyond EOD, truncated [ 937.133627][T13715] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 937.168584][T13715] loop3: p3 start 225 is beyond EOD, truncated 01:54:27 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:27 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 937.177122][T13715] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x501100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5ff9, 0x400020) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x300, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={r7, 0x67, "90b6f4b50e875c1b46513429d1e980b7d3017fcb6d0587fa7b6ea357f73fb8f3033e9ac614322d0d6d7dd3761e6b05cf6b811ed286a83f629089c7bde1b56e732c2f9d5452b279f549acae53416f7d9b50e8bd1e4fefaf7c76f4eb5d763856edff8ad40845231a"}, &(0x7f00000003c0)=0x6f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e21, 0x200, @rand_addr="ba2b9e2e26ce7f4ecb1d6c88d8a81081", 0x100}}, 0x9aa, 0x0, 0x4, 0x5c8, 0x7ff}, &(0x7f00000004c0)=0x98) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0xc6e, 0xfff, 0xfffffc01, 0xabdb, 0x19, 0x3, 0x52, 0x40, 0x1ff, 0x93, 0x9, 0x8}) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x0, 0xf0, 0x10000, 0x0, 0xfd, 0x0, 0x0, 0x7, 0xfffffffd, 0x8, 0x0, 0x1}) 01:54:27 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 937.462964][T13805] loop2: p1 < > p2 p3 < > p4 [ 937.468321][T13805] loop2: partition table partially beyond EOD, truncated [ 937.481271][T13782] loop5: p1 p2 p3 < > p4 [ 937.498719][T13782] loop5: p1 size 1610614783 extends beyond EOD, truncated 01:54:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x262081, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 937.523123][T13805] loop2: p1 start 114 is beyond EOD, truncated [ 937.534087][T13782] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 937.541459][T13805] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 937.551729][T13805] loop2: p3 start 225 is beyond EOD, truncated 01:54:27 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007a0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 937.571394][T13850] loop1: p1 p2 p3 < > p4 [ 937.580047][T13850] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 937.603938][T13782] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 937.612225][T13805] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 937.638354][T13850] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x0, 0x0, 0xf1a5, 0x9, 0x20}) [ 937.917858][ T2504] print_req_error: 771 callbacks suppressed [ 937.917870][ T2504] blk_update_request: I/O error, dev loop1, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.935037][ T2504] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.946129][ T2504] blk_update_request: I/O error, dev loop1, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.957743][ T2505] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.969392][T14077] blk_update_request: I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.973875][ T2505] blk_update_request: I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.980323][T14077] blk_update_request: I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.980358][T14077] blk_update_request: I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 937.991838][ T2505] blk_update_request: I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 938.002091][T14077] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 938.049672][T13782] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 938.057592][T13850] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 938.062598][T13973] loop3: p1 p2 p3 < > p4 [ 938.073917][T13973] loop3: partition table partially beyond EOD, truncated [ 938.081205][ T2504] buffer_io_error: 1044 callbacks suppressed [ 938.081212][ T2504] Buffer I/O error on dev loop1p1, logical block 15, async page read [ 938.095713][ T2504] Buffer I/O error on dev loop1p1, logical block 8, async page read [ 938.104077][ T2504] Buffer I/O error on dev loop1p1, logical block 9, async page read [ 938.112182][ T2504] Buffer I/O error on dev loop1p1, logical block 10, async page read [ 938.112763][ T2504] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 938.128600][ T2504] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 938.137170][ T2504] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 938.145400][ T2504] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 938.153666][ T2504] Buffer I/O error on dev loop5p4, logical block 512, async page read [ 938.162004][ T2504] Buffer I/O error on dev loop5p4, logical block 513, async page read 01:54:28 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07026000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:28 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000073000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 938.207748][T13973] loop3: p1 start 10 is beyond EOD, truncated [ 938.219105][T13973] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 938.232399][T13973] loop3: p3 start 225 is beyond EOD, truncated 01:54:28 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000004000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 938.267918][T13973] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x6, 0x1, 0x2, 0x1ff, 0xa, [{0xffffffffb09a8bb3, 0x1ff, 0x2, 0x0, 0x0, 0x183}, {0xf9, 0x10001, 0x0, 0x0, 0x0, 0x2708}, {0x1, 0x4dc2, 0x3, 0x0, 0x0, 0x100}, {0x1ff, 0x9, 0x5, 0x0, 0x0, 0x4}, {0xff, 0xffffffff, 0x9, 0x0, 0x0, 0x3100}, {0x60, 0xffffffff, 0x6, 0x0, 0x0, 0x202}, {0x3c, 0x1, 0x7, 0x0, 0x0, 0x104}, {0x2400, 0x3, 0x200, 0x0, 0x0, 0x800}, {0x1, 0x0, 0x3, 0x0, 0x0, 0x682}, {0x4, 0x9, 0x1, 0x0, 0x0, 0x1100}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2f6, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000002c00019dc8e508000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x84}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1b6) setresuid(0x0, r8, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x4e22, 0x8001, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x89, r5, r8}, {0x2, 0x158, 0x0, 0x5, 0x100, 0x100000001, 0x7, 0x6}, {0xfffffffffffff001, 0xfffffffffffffff9, 0x9, 0x101}, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x5b0b, 0x2b}, 0xa, @in=@broadcast, 0x3503, 0x3, 0x3, 0x80, 0x0, 0xe9a8, 0x5}}, 0xe8) r9 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r9, 0x5412, &(0x7f0000000040)) 01:54:28 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000d80a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 938.599811][T14293] loop2: p1 < > p2 p3 < > p4 [ 938.604552][T14293] loop2: partition table partially beyond EOD, truncated [ 938.624934][T14294] loop5: p1 p2 p3 < > p4 [ 938.646680][T14294] loop5: p1 size 1610745855 extends beyond EOD, truncated [ 938.665080][T14293] loop2: p1 start 115 is beyond EOD, truncated [ 938.673777][T14294] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 938.688737][T14308] loop3: p1 p2 p3 < > p4 [ 938.693087][T14308] loop3: partition table partially beyond EOD, truncated 01:54:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r9, &(0x7f0000000140)={0x8a80a4cb55d28799}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r10 = fcntl$dupfd(r4, 0x406, r7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) [ 938.693253][T14308] loop3: p1 start 10 is beyond EOD, truncated [ 938.700706][T14293] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 938.715786][T14294] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 938.724563][T14308] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 938.738602][T14293] loop2: p3 start 225 is beyond EOD, truncated [ 938.748949][T14300] loop1: p1 p2 p3 < > p4 [ 938.760036][T14308] loop3: p3 start 225 is beyond EOD, truncated [ 938.773852][T14293] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 938.781882][T14300] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 938.792192][T14308] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 938.811892][T14300] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:28 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07ad6400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x442102, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xff, 0x100) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x2) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0x401, 0x1000}, {0x4, 0x8001, 0x3800}, {0x3, 0xfff9, 0x1000}, {0x2, 0x8000}, {0x4, 0x30, 0x800}, {0x1, 0x9, 0x800}, {0x1, 0x8, 0x2800}], 0x7, &(0x7f0000000240)={0x0, 0x1c9c380}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @rand_addr=0x9}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x200, @remote, 0x8}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0xfff}, @in={0x2, 0x4e23, @multicast2}], 0x94) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x7) [ 939.280277][T14539] loop5: p1 p2 p3 < > p4 [ 939.293557][T14539] loop5: p1 size 1689061375 extends beyond EOD, truncated [ 939.305088][T14539] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 939.336657][T14539] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:30 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:30 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:30 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:30 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000074000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$FICLONE(r0, 0x40049409, r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) read$rfkill(r3, &(0x7f0000000100), 0x8) 01:54:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006800ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x2, 0x100000001, 0x8, 0x101}) [ 940.722190][T14648] loop2: p1 < > p2 p3 < > p4 [ 940.727316][T14648] loop2: partition table partially beyond EOD, truncated [ 940.734971][T14648] loop2: p1 start 116 is beyond EOD, truncated [ 940.742163][T14648] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 940.751567][T14648] loop2: p3 start 225 is beyond EOD, truncated [ 940.751852][T14644] loop5: p1 p2 p3 < > p4 [ 940.760756][T14648] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 940.769940][T14644] loop5: p1 size 1744832511 extends beyond EOD, truncated [ 940.778571][T14644] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 940.787858][T14644] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 940.830451][T14652] loop1: p1 p2 p3 < > p4 [ 940.835161][T14651] loop3: p1 p2 p3 < > p4 [ 940.841212][T14652] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 940.852384][T14651] loop3: partition table partially beyond EOD, truncated [ 940.877430][T14651] loop3: p1 start 18 is beyond EOD, truncated [ 940.884821][T14652] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 940.894152][T14651] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 940.917319][T14651] loop3: p3 start 225 is beyond EOD, truncated 01:54:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100, 0x440080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x5, 0x0, 0x5c8a8d67c248ff15, 0xfb93}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r5, 0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r6 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x8001, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x8000, 0x0) [ 940.947229][T14651] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:30 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000008000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:31 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000078000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r2, r5) setsockopt$inet_dccp_buf(r6, 0x21, 0xe, &(0x7f00000000c0)="5512265019112ff49df75e80f7bf53fb26756ea4d9473bfc1c709e318ef1760d26c2ee3e6733253f193cd5a03a547a8f6262f1fbc510deb549df5136707fa0ecb0a648cdf0521ac6", 0x48) r7 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000040)) [ 941.426858][T14883] loop1: p1 p2 p3 < > p4 [ 941.443422][T14883] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 941.473293][T14883] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 941.492644][T14891] loop2: p1 < > p2 p3 < > p4 [ 941.498197][T14891] loop2: partition table partially beyond EOD, truncated [ 941.505761][T14891] loop2: p1 start 120 is beyond EOD, truncated [ 941.518293][T14894] loop5: p1 p2 p3 < > p4 [ 941.524746][T14894] loop5: p1 size 1811941375 extends beyond EOD, truncated [ 941.544436][T14891] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 941.564056][T14891] loop2: p3 start 225 is beyond EOD, truncated [ 941.576718][T14891] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 941.594754][T14894] loop5: p2 size 1073741824 extends beyond EOD, [ 941.594762][T14894] truncated [ 941.632547][T14894] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:33 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:33 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:33 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000009000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000018c0)={0x8000, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = socket$caif_stream(0x25, 0x1, 0x3) sendmmsg(r2, &(0x7f0000005ec0)=[{{&(0x7f00000001c0)=@generic={0x4, "22d290c692c6a9df7d0c4924a3b788424e2daf7ef485164fcc6184f806875cb0060e01ff7d64634f5f26244ee74db6ea09f3fd31c2650a243fef3dc80f21f354c1715e02d2388124480ffe7ef79a1d2ecbd02cb83e7c4bc4129a9b7771b7c01fa2748398096b46dd568a11d369149f54f89f3222a617c1f1a2f181b53bb8"}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)="8e04c871e7887c2e6fa702817ff44ab22e520f0bc7a07766e48c177a1ffc04bbffdc783ad7c546678eae2718c684d933066c2ef5e86167d51a4cf99b121b76ed2d702c3a01f44464519d1179c9615c2e4ffcfb25f68b3a6e2b50f15a1384aad3ad7d3db04fe415ff1f042579a26a023221bf9ccde55ad10aed17f902b5d99f56c04a39f429ab7dd5a30ba436175a46407448005473707dd39cc610c6d372428567ffb0", 0xa3}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="80288e0785e755ebc14906d587dc0300f58b8f9bcfb2234cd6a1e60e901b9eb7b20e02d7395185a6b3820c88", 0x2c}, {&(0x7f0000001340)="683ed8a275952ea49202eb094aba6973faf97be63507f560d8cc45ed783d3854983a8c96800037b654ba92f7afd172a21b0160928d1d5765b4a4cd36185757e25af917cf2476eed42ca68b195f902530033422ad809ffaa7b19ea8f5938aefabaeeaf4da596893794ad29839a96908d9c22f94685c9d89eba649ba16773570663926ab6b03c9b6d461b5173548bdbfbdd6709048f606fa61707216124cb3ddac6b7d9637e91af6752dbb588505f5222e161d50b82eecdf7dc955360cae80d7410435ae958af35467d0526bebccbb68", 0xcf}], 0x4}}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001500)="2eca358d054ed55fa96979ee993578562be61ad2b3448c98e81e64263269265fa61121aba3c956d88a2c76fca3bd084911b0cc50d303bbd4bf8defe5eb556e32f08e3e69e2f631b1abe88ddf38d50bce57d6b67a4862be6515fa9d8175705f59e4359ba5a077f9e570e264", 0x6b}, {&(0x7f0000001580)="0bb4c0a48866a432b67520377db7c68e42230b3e5ccb243c25c4436f71290e14e6162c783b81898f318c44f8ce16514d78dada8c11328e6165f220948d0667e56501dec3e3270bc98663515b471ae95c28440d372d3afb7acaa53947e8e8dafa", 0x60}, {&(0x7f0000001600)="bf54aa0abf669e24ac63ddd2e21dc6a36ffdf51d0d7f2f5fe946a6388da19d0202fde6a5bbbbb1289a465c4b7d7bed8eaed26e50e156fbbeb5eaf0b49517e14c5d9e681c45f18644e9e9cd18eef47edbf70f1bd65bfe", 0x56}, {&(0x7f0000001680)="7e3d5935ec012bd78522c81c6729586c1933544aca99f5207c5e7066531d9f3b692d210b81ee5a7e96c35137e2f2fab1bd15bc3bd50159e771862c6bae9507fc092e9d14271168e60cd4f6261dac687d6b", 0x51}, {&(0x7f0000001700)="c8498c631a1d9448c4b8612a82372039893b9ef17463c08415f10931e8ae6262ad21a2c3f93cb83fe3eb1e3ba7a088f468793b6c1a2f89f4160abf57ace55e493f5f18ade75a15e0f62dee6abbd840195f5d66bab7cd35a32c694d2fda73d786a84d6d3119bc3e830a38365e55cce5aba44d5b0ccc9b7e09b4c9ea75607c179ec7c7486d05c79d791c71c95de2041c0854ec7ed6a5d869b251c811", 0x9b}, {&(0x7f00000017c0)="cd610195778347b95f9173acdecaefdef0470511ce9425fbfb542453304400fe149a3a22afc16278762fecb9944439d59c3e1f1798b66566c3d523bce8fc3529c83076afb8900c9c1227968c5b73a0574a349201e773b925cab80497b36b233b97c374ce228992af9d4dfea7d8df790ea00ce5d9fa59b3ed20501d844651106d8c8e6c79cadd5a565af236c0da971020836d3004f7583e419e77a5f9e6bc", 0x9e}, {&(0x7f0000001880)="e74d4daed612baa682da86ed24867845", 0x10}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="8c8ccc5617656b218166823c6a9cc385db0a5b", 0x13}], 0x9, &(0x7f0000001a00)=[{0x60, 0x105, 0xc6, "6f104e310574a71a5e867fd96c3f5afce4fbd55d787cc7617da0a58b2c95119023dc6dcc1078cb60444c6123ac11a05334588a0ff9b8dc9930da5755cc2e5278c52f985942a7c1c00d0da9"}, {0x88, 0x112, 0x6, "eb388cb5383d24ada7073432e01553dba18453182caec66b24b64719d0e172d3ede9bfe011c30d57f928e104addb764540b8463eb26ef8f78f8f80c8b33de831a87c7184c49fa6a7ab5acc04765714f213cd586ba6daf976b72454746ebcbfb07e31790e7dc6f861a0ac8e3de4307297accc5c586e89ec"}, {0x18, 0x9f, 0xfffffffa, "58068a"}, {0x68, 0x10f, 0x1, "85b741e8a342bbf0bedb5b102746601f4c71a1c16dba4b35df3f99bfe56be22f5a2e8ad8a5fc9c83d7c1ecf39bc84f13eebb2d0a5dda11a1dcb8537286aaf18651cbd888e8b8e4c0a2b21bdb794744809d"}, {0x1010, 0x102, 0xf8, "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"}, {0x38, 0x102, 0x8, "91cb1231c8c38442f51c6e5b2584667a344fce1998f4d01c6dd4ac19f765db11401a7237a04d79"}, {0x98, 0x108, 0x1f, "ba1e0e53c548531d737b8de467efb918586c77f8da40df5e8703d5dd426fe414d3d00180f5f5030beb120b7b5f15fe9054b37370bd6ec6751c774cddaa362f79a587d11097733716ab1b43dbed5599cf226c00b489804da997e3d2573f46a1e96dcd53a51a9ceb7fd012d8bb8bfea18ca82e836756715991dc29ebd09c5e4aa89ae46576af86da"}, {0x98, 0x27c, 0x3b9f, "57922557521619d9d9c6d10885fd827825c836844103df651074bd8652a1582a50bdd9634f331f4e33e192d858e25718045a6e972b4bab3dae82ee787742f64101e47014fd3452e13c679bc60c5a3f737f36e0bf607117f19708d5a3074e86e507907d01856c5465820114332fe8454badee552c3ae33bb6594b6afe949f8b8785f74ad78fed90"}], 0x12e0}}, {{&(0x7f0000002d00)=@caif=@dbg={0x25, 0x2, 0x1}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d80)="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", 0xfd}, {&(0x7f0000002e80)="d48e43e3a8caab2c768b43b028a9e074a653debab39d925c16d165b09e562b557562c763184f2c532bcb868776bc7c0708b88b7e212f3d7eb3e357b7a55b34ec5d4e7ceec920ba1968ae61066b69bb31dc9ab1c8b68f7020a31d95dbe87f625b6196780456a9a01aeee65681e5a26800c5f05f7c33417aa342668bc589599f2219c6181011186056915fa908ad3186b1f0089d9cfcd81004f4d2c3226f036abdf5065d493c06cd144aa7", 0xaa}, {&(0x7f0000002f40)="5b0ae377d14352abf183615786c3d6635e13a3f859c62379908ec340db812df84ee8cd1296a99156c930edde60be5af0c6a41ef004b1381b095f00399febb7af64fe84bb8297691e1d13fed082089ee4ce940019ca562928282570898f8ec69a9745d7116f554f3ee83d2a63574ba3213f9a777c7bf6e609398299ec94d2ea1cf2bcae578a96f64b5e9bd94180f7c06bb172d65273b6201eacb6c376fdbbe6a536385d532fb62c28bef7f9e3d31eb1819266a63ac9cf35d3588733328d7398e9ca79373e5dbf0e185168f3a89c1c329f65a74aae01a2aaa4de", 0xd9}], 0x3, &(0x7f0000003080)=[{0x50, 0x88, 0x0, "d7cd9b47da5b4c4ec395d5850d88fd9377f45c8938470b6d1f4abc5a0c076e1a3588b3b6420c23aa413e28ecb4bee3e3e1679646027331f6b565"}, {0x70, 0x114, 0x17, "22cc14059a123437f9bfd99d395149e7f150ca714c909a44dc6fae5efacd120d62e6331e94e9af41939417551f5a183335f253d099e80cc03094d6dc9a6472c2d48fe309781ec79c0606fe68637b4432e32fbbe1a262f5a81a"}, {0xe0, 0x104, 0x8, "ab6d68c75cf046d4ae4ab4191a17bd494eb30459e9058d51d53d3f64004a40e10ceb96135ff6d3eb6e842683465b62070df9188483d365b59e04973d12ef1420ef9a05c0d85e44a493be2e2492ee1c6cb0033a80c4dae25cd840d2bdbc3f227701309f97445af5f03549a8e1c7b509f4726f37d53f8c0398977a1e142f8acf7bac53d2105d18bb4f769a0cc4f1c5124103194b30f1255e85a9fcd2c8fc8b96d77fc8178e7f54577d84c9b0f9c58aa97e040e37ae300f09c3cd6ffd73b8ea5b0ec077aadad74baa84f805c8b9"}, {0x80, 0x114, 0x6cd, "dbe3317c9149954b2a5f0b8650bf5816b81b926a11bc5df59f21b01d6536f4ddc821d534f9874dabe5549b11b17abbefe90c0bbf7c99f2882e05d1e6790445a5315252fde8abbd63190a2e81112bfddb65cb05ff978f17f27b41e6524734fe4ec5d0caa586f6d98488f0fe8dbd56fe"}, {0x58, 0x18, 0x100, "61f2bf24b95a9f7190a5d3d6fbb962f3777fca31e7ccc00251eed4096859635a1cb02f3b3f6ca8981336ca25eeb7fdfa0407ba0913e129af80aff712b63e63566d5def05"}], 0x278}}, {{&(0x7f0000003300)=@ipx={0x4, 0x7, 0x3f, "4252c95621f2", 0x6}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003380)="11963442a804664c06b708e0d8351868cc7f18f50cd35d3a3b11ec632da795b65fadbb203c99ad3c714f142731f74b94c9979c02ad43295f08cf75b53725c2f707d358a9dc3fd42e2e1109c785c3f89a3c809878815fd8b5bcfb196da6afb78772dd46657a915964004a8588ef3b7c574b25ca5f16e8079740d78ed98f7b99901042dded59469c61ca0a03add442d77ce67e981947729f20f642ef1cc8d1572fdf428cec520ba8679a2dd0074d8eb0a6c37da25f2cc266e2123afc04a3d4836b614546c293eebf73fa8daeb4c56129a948bfc3400e4db13b626200a6121bf3a2bfcaeb3f6d53146e2636492d80c31e602a8581d0b72c22fbd36ccff5d8fe31aa9bbf86adbf47573c6c40ecb2517d92ee3ae7d6c045419be06b1ae792b054e16c3bdddc30b05c4af746ff03b2756fabae028f9fe17ec243aa0f3a4ba0be097613ac5717f1592bc7f30f0194ff5fb52ad02fb60468b2a00c432ba1caf423948470441658e3220558de7d76e682da715aa65faf37797b7000344731c617d28487a6b756ab1a1e6efebfb3d2429f96ec7038b1c16042234d236583a03efc3522edbdd0828f4a930361882c02026cb6ba5a8535b12806f197b1d9baec2ab8b20bf1c9b0f1feb48a299eccae183a9494bbc7ffac47978df7913d8544c53235aa9fe5b29a474d80960df0e313e4bc0552d4926ed2bbd622388b39282415c68d8e738242198425f2615c00f8f78dcfc36d58c96391677f89feae1b61a4c6a447cf01acce2ea7906ed47c0bc0cf2318e196b80eeb801c068bb160545cae85635a1fd35fb16bf9646e2b39c3f2bdc4f0d3cf38049e56ff216d134bf026180c491d20ddb93c6764f8ad6c18ed12fb3382a2293cfc51ef5d0c65b7804093ef6ad9142a6f27ba541bcf741228ad72835c58f70f1d19503e5358595e48cd068f288879c559e4780c096a3c81f87b52768c68c4c02ebc293e69fb10aa6cb81e84466fa81c6d42cc627b16a3974afcb12340751af42e623cef7b50149c92c1dea43cf2c90f2d4bd8418934f0d493f3088f47730777821ccc30336195f3362de626030184d7a90472b05fa8282de1f3d355f51c141b3e1945bfbce451b5c83f1333f3927297f0c32ba8d8291378be2116ee537b6aa9f9abf48ef2e79ebc85b86e23cfca2afc8a5aceb56b5b74dfc5ce7a93f7b2e31d3e338937ecca1c9a4d34975f8dbac9d201e29f5eddace0b56b875d6705bf9b9ab2ccf4233e253eee08f9582de2c633f70aa9382ecc8ebdc101788793f31c4f83d61e2a49f3fc4d3656d3bcaccffc17008531c6a85545b185253bdd082428e72eef2a142e11711ddd8e3ba6f441808c58449e0140974c1d15024a36946bc94a197714a17b9af49213977f43e2e958479e7bd519939b966f829b5175b1e6db89b68066fc99a1cc583ef7f977a9ce43a82a6540ec4fbf7df49855be59e8286fb73f312f3a24d86599c0debaadc080aecf1f0d07ca37bd716f7b5394ed2b6d87262d5eef7072406621a5b54465dc218826098eab463cdb727dabac69cb53e0d51cff8ff92d8a8b8e94ff19edf38f5a854056a0804d0e5cde2b799b462b242e5027229c647406de67ab8fd0cc2b230b4c8e9d4681fb9bb3acf9bafac9c87c45c45dec05f5295435583f1d155e260cf64d3c22e3878923ae622886f94990819da3cc4f042488c5c9c359fd754c53ea524148c5e82b917827bede36caa137da76e3aac955968e5e4cfc039d55963aa06e7ff3b9413168bc4a0e07bbc10a03a03be16765b7cb136debf4f4b750a2e09d395fa0e29af8730503de4e50b94a7004119204d7e68e7f554acf27615073439f58d18b2582fd91b53a7bfce4bc8fdeee369aa2fe8149f64588d20d013c31382a1d379754783631faa7313ab498bed4ad4f2800a9265bdb799d7165b4d8938fce5565acc60401a98d32b4bb76f2ec43e8ab6ea17f70e64009f3ad93f4b8ae7a1eb6a0e818e5c70d4c30f1df69b0e7ba7f9f76f588493b0fed8351697f7369ec984670c0e746d3aa95b0a93804eb8ff21ebfda6b7a556cbe75edcafd76bb90a81e3b6776ce31a4826571aa78c484d2b458a9eedbfb91dc4ecf9d65ade63023ce19a0aadbb5728dc55bed09be0515dc292dbcbd03c9d76c7a5cb998455e8e7db7d39d52e1ed967e7369b39d791af22eaa04c5208e900cae27847721bcdd8c603eb1859eeb4976e8cf16a267e52aab8708ae69a2eb023923792caacd8f94630071c7467d391dd39bdc91dbf755a853b2e31f06a6ed17ba75cfd3c6006f32ae1067a2f1f85365ea12aa9af7920abb72327cb83d0da4ddf53e2582f3cc749930a0adc3967b8eae863b1dfe7b6228e788a6d9e7a6ddce460756394db2519795ae16c3db08c58084339077eb5f01fd16e83ebccd6d627050e0745d362345a951f2de1f4ca300310bfba37b1a54194398bce6b5d66f63891233a5aa61cd1c394990b0f6bfa5388c227c8d77027c971fa8aff89f14ddfd96e0aa9ce2fab42c27d4633ce9207af8dfe651609029bee11f3ea71fff547669a2e6111e433d2c0c9aef664618fd460ee676bb9e274e435557867ec33ab5952f6741df04471b13a6053bc1e527762d5c5c2d34a2e0c43bb289509e66a0aca9ade2f0e9e608c886d0aea54a344f1c7ea78988102d7bd3b21550297c1e147835f5cf39f46968f46a1ff35a2eb6d2d58ac93227db87f460fdf0b031290e8ee35e38790ff77d81a5d088646518c1d0f71f3e31477d3950e17eec062f5482c41204086fa6df0e09155cc5b5d5a9780d1132192875518a0190eadfbb9b3e35c7cbbb447fa1f13bad6ec7e80dfc4636056c77577b6fd940f2db52ad86ea314b2f96369ac0d55e8b7afb54e61692119c91e5849ee5ddb4553292a4ec311264555aa8fae57335530fd67ef3bb57dacf4f3d3abbed38d48b9484b5e7a5d01fc11a9fc1ec210978520a6ec5b3f13c87a94cdcda6070e4dacea4603425d2ab1b18ea12e33431263399aefe995c801017ce553a3eff8b9a796f5c4fbb6600eaa1d3f539153d0d37953737b2f2f46ef2dd89bbcf9917203e4522c3800b5c50499fe137643b7875cc6b4a55b39f2e8d8414319bd6d46097564cabd40f5c9d2531b817fce0d79d0c55ecbd4d0c16e1ed1fb43fbb24b50b576d59b88aa901a76680280825314b1fd7f71eb4770cf45d5f79ec3bebf95d464af206dc0f3928d1f0cf96a21f1eac49469e83c5138da42ce9433401f426375cb61ff365d676dafc51fcffd1ce69fe48f5eec652128c56d84d3d24f183a2fea92bf06ed8ce292b97375314c18426ac9e45ff6b7a35f551d121ee61cfb8da44fa78448505ca0dea5cd399eb804960bad8f6508f77b19f14614ca60f57020a8ddc141877942ad8bd7b7bbfb837cdaab1a7a171ac97b2997cc800ef51e8ecf37f232384f3345e85f5484cf470a0c47064c97e611e4a69de94b2628c0a8409ae9298d4a2000d2a19ef52b7dd237bd2477f8143883f33b39d952d4bca7cec67185f7e2795651a3820be2c31169cd2543459abda9162c3217f14209ac1afdedafbbb1451fed3a5a9d80ae40d90a2fbcacf5896bf5aea845eb509b03556e85873163dea7b8d1bbc15f40c91331997b6c5072b40cb5cff026febd2a0b127a678dedf9b18716a405054a3773593e97c5ab84e5e4328cde2a9853cf114a5349a4bc7f19e0419b4d8ab6c1148ff580b20acff4e11dfba4da31180c561d17266aa88112ee558bdd405e5aa434400935e0a64b2ab05724f496b876ba8cc78d2568f087508669ee076fc401c678121981fb16c87aedfa12d9bd6fea22339e784d49ebd7d9fd1d5ad5930c2aa9d04665e7da4f597ede2c3be073caf0cc4757063cfab79b510470a1cbcf79b826f039617ed9e72257c566db6bccc9dcc2b142c1e0fa057a2ee4b7aea20b425432ddc646a39a3e742157330e1bd4828594806976922c23dd19e2ff0ec0c05bf93ba522ee2ee6de4394bb44a40674b68c92cd5fab0e85952db7b1283ae241589ab70923921d92fcca929ff72108f1eb85c4900d6af7f2568531695a8362fa9f1e2ad0ee1e33cd7b969733ae4a29c79eb39113e32428c0d14d237aac7feaeb379875ac2b2cd713778f21077da4783271871001b923eb7508e07b1543063bd223ab0964003cce717142f22a6ab9d4bf032356e39a310f9ef6a47cba858e5b2a1a10b8c7f0c807054e71e3877c7263cd0e162bfff500d6dd5a60024c9f6dc369c6687c93ff1301b06782366b8e97cc854aa35fe38048568d58a66a5a07af1a9f02b22c27361218faf64c807b7cadc086a1d04d8df3ef075beac95d5ae47d3e1cb7341489abd758d9d9485512073782c3fb95d29e89ef95edbd5fd99c9dbdfa5828388885807114cbbae863526ed1510e73609c0912dfad0b80ac7653e5070e334c790672e0e67517bef37acac540221b308a6ec5e4438cc954ad0a75eb572bd598fe045a2714bd943d21bfe777623fdb023645afb73da73ea16588e28e84588d37bbbe836af7bbb1108dd65f47dfd4567a877a2aae5376632df05cd26bf5f76f65c437d6d91af30a5efb858ab63a688c321676c5ef2722bf966160391359c2b227a25a6c092af18d288510597194048bd070e54421248bf247b818a05985f79097111b720d02337d55d384646cd16c8a7924f5ba9f835c04d2d0499dc64230ccb15bb083e3dbc956a569977996d4f1090d738b7b8fe8c200652a4cd5b3d3070c7c12860bfff8b98d1015153067f98ac424eae9db57716b1a45d9cd2b0100dc9352b64e524fb679db7fa203a951f0eb90c8d1096fe9730298f4c8e679c996007e046c3f81b4032a6b1ce9585f19e1dbd2623bbb540535aa52c1f4e2e82269a38875c94f7931c4d093f934057003877644030c4bbbfe52fa123651e720d2baca7374a5685848e220f209b5240b1c85cd962306d81afb01dbc457826631fa91159024b7c291f2b64aaa4eb768dded8b8c343937b4138ff49ffa6d93aa636fad762826e9e4e570ffa5fd4539d2735a3e34fac3edf4b5b30ca13a11c29e19e2c80b76ab21fcf682a6989a86b657b6102a1f4ee2dd4ba584baa923c6a7a636e75a3ec7718a178a8e91993992ab95db6d806851bfdc061644468612337a6f2cef82889d7651122ffd606c6166c65539c8c1978e7390343231571264a4dd0ce826900d92d4ed5ab547324cdbe149dafda15c5a0c03e6fab97149f0d7bae675f61d1449f40afab13bc51a01554b354741b9736826f911c25258eed051306f87ea8711cab2cd097f2ca2637aa915a11cbc7104c60afdd36b5c9bc5bb759f143b1f62486b668427610f3fb89618f60779ed942a7c27d67a6789cf99f4ec1fd799f7524608c3fff7bb2f0b3ba5b08833e2f2333403e0bfa1049348f762c3fda20c4e6951adaacf0bc4ddc0a6170025a74d44444b543d9d11f7dc1da5562f0be6ff7b0fe2ec36f13d3954c08647d1a8d70127daebd61f3866ce48bf1a93e0e1ab4bff515510ff62db5e131887c3dbe5c7dedbfe4c0d01c26c1bb1b349753f31a0641b8c099e48da2414281e0abdb7ce4c5693bd17a91b165058ea9e1942b2063e1f9ec0b868d61e99e2faa23ad700ecd026edef97d87eeef4d608bd2034573f085048528616baed37641218d2ca50034418e9db62b28393c67968afa50c6f720c1ae6428182da772d652f6fc620c85ef76354f13e2add923f8b6644da1b580dd8ff9c4747b2f1f115f3a94ea03dee201547ad7ed88a0bd03bb3b982055ddc027f64c5ad0db7789618094", 0x1000}], 0x1, &(0x7f00000043c0)=[{0x110, 0x14, 0x35b6, "4e674c4ed069c27157eb540b9496080a565434a60c541140d092d5c4f385507d91ac42e962d965fd4dd6781112fc9b1d5ae73d1b193f9c2a833cf529e684be3fbf599667445ab58811625d9a8e2b72e746f64733dedfbdf1a952ddae78c3742e55dac098d1f290a18b224a03741384d0a8b5bfd066078255ec00114c3791981ab1d84322919fa048a5b2179a5792b377f2d002c3f89e9058760fe7bc09aec80fdb95cf9cc32ac8d96b171d6d679509ddbaed4fd70694b3225c8437b4080463f568d552aa91faf7ebc03c3784c881ef17e5db7ffdecf499b47155f58561cfcae738d2f3bd5ca7308a55c0164950330ef8880b4310f713f9d7bf"}, {0xe8, 0x1, 0x8000, "26181b1f35ce9738487446f6c806c27230f60171d29d45bf4ef1108e948457da4d921c3ae0dc095469b19058b270287f7cb411ed0924541b736d9d77cebc825fcf8375fba2bab7043be7aefe2e504765721d249be5f7aaa2f2a98c75b709c4e29c41b1771637699f210183480999b6ae230187ce41037c8bf051432c25a27eb526d89f7baebb2c80cfe58c35b81afce32a842eebe6f4987a026e2f5bb7393e95722f41bd7c9e919d9dd9e972bd8ebba749b72ac30a46c891140618aabd5b2dd1841ba112aae5c2870b49d6e5eed9d8d3f266a5bf377d"}, {0xe8, 0x30c, 0x5, "eb7f80b296c207f98157e674d4d7fd2b120c45b33f94e8ff409324d9c0d2fbb7388eb3083ddc34965a8b0c5255382d7e6f62823b2756474b42deaffad1b3042c0e3665142cb23884e1de27b5c41c7eba75b460f30179227284fd6ceef9c02b5f75224ee21956c635623ad8fe8713ccf6e163dd893535154a7c20b127e3750ff0f08b40aafcffe1a95d1619f3dc11444cda2aeef09f93308af3fb9013204f5e46521579270dab2b6a40bcbe51515bdb71d7a2b13e0ea4e6cb1f5e5698b29591488082c4edeab426a3eb171d5363d9949b2b165512cb2fc333"}, {0x1010, 0x86, 0x8000, "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"}], 0x12f0}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f00000056c0)="d655cb03cc4e33721b3ddf89e9803842a0ead145b7703da366662c222e4393fe390afe", 0x23}, {&(0x7f0000005700)="2971c5f5084fea3c3c3c792fea3bf75d7848674069ba82ca4115a32b9e954364dcb00a0e96c3b5facb698a6b8f901b0078c493a29774ab1d8ecccf912b24c242a59f4d4f76bef3524fe890253663cbe9faa0c830827df3e9be706060e3dd37fe2d3cb561e327b410006325ec8bb0d6437816b488", 0x74}, {&(0x7f0000005780)="27702edaa6981029597fae7c34158df05dac44f06a24a396a2191dae6b7757978af2702df12c61a7152313d5ab6d50bb95a19ff60cef5183ed39102ef387dc7903105e3fb2580539b8fdcde0e0ea74d5a5f0af0cdbcece00066d56106d55ae29a6d341b78143b9de3472cf96456eb2313fd8d3d193f35becef938c7954b26611cf7a840eec599dc87392ae38531d572241d43874140434f716bd995b95f44688c5cecf1da6f7269edfc57e55afb6a55e2e5a2be71206ca5acee2967eab168a3ae6580f46c5231425f3ca2757174b854998c07045e06446861319caa10341c6a55cfcd653b4ba62930d3e", 0xea}, {&(0x7f0000005880)}], 0x4}}, {{&(0x7f0000005900)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005980)="9780aa7f7b7dd69f1fde43cee0905fb488b0c9dd096d73cd1d96295120a63ecee476515d46da9020f0dd8aeb82e3a33093525b6b2a84caedc94e75df96aab38c0367124c3c460dcfe84f84f1b8ad29f4bb5ed2e4bdbaf9dc73dbded41d05d7771da6c85136a5b5ca7a8ce58be2dae4f299894fc0bcacfed496703502f25df481eeeae60c1f203e925014878cc9cddb511659c25fa165697064e701437241340787231345334995f97277", 0xaa}, {&(0x7f0000005a40)="305825a8db65bd12f4dd", 0xa}], 0x2}}, {{&(0x7f0000005ac0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005b40)="188d40fdd35e34000a7328f9fa180adb856296318e843a79c9dc97f97b430845bbaf85dfbfa9532c02e29976063df0b2bf0c56a651cfce1899af813e7803d49afe86478ab8163f33d16a8969ae5d70ab5f2d4d436b757e19905be965ba7d4469807483c3a0d305cde270d86eaf22e5af8d2a331b8ceda877b3ac39aed5c373e1b1ba401d743063fb1ed04c74717c68846c6dd2125ab168a5204da1b5856d2e2f30f7cb23fd67c4951376bf7d4fb08571860cb638bb38144388c7079d262f540509a502c0917970dbd333ef0a947c1a51c88a26", 0xd3}, {&(0x7f0000005c40)="7dde6d81c226b49c777aec055403f32fa71e3ae92184116ed8315e92ffebd213c11d83f42b87b9200a25e4057a9f9799f982458ec722c4740e02c3ac1ab95285c545cf85f736e554b6d34e1711cf84abdb5cba9e150b0e7f78005c7849e175b4efdcf1d0b1b61cfd648f91858aac5607752c46f3db69507fcd2e68e01dc635cfa07919297acf2ed272959e2a54a45bb6fbc7b250cc2e451ec4cb7d9a3e25c7e199aa29df462c22698479bdcc3b9a2f21bc16e44dfa9eed2c5c1d793264bf98f107021bfd141a5401db1d0c1d36af1cc82535c2b776f3d62cabfc13a6482969d7f7e485f100ab", 0xe6}], 0x2, &(0x7f0000005d80)=[{0xf8, 0x112, 0x8001, "34d1e3e00971b74ffcd8873fc422b8e0c341a50e0c275c0b4471df5a52485f9744b973ef9793cda63a98e57299c7cead66eb52cbcbe8e2c0a87f1196b4f42a2e7916148c14cfec86bfb7d78bd3591553ec914f5f191c6e795bb7ef36a9b7863aa92688bd5b712a5602cd40d4ce32d4b4163fd79da937de06f3699110c6c1088e0863aef7399ad6b5f3a70d2b2098255b1b6652e6bba8ddf0256acfabed422374e839adf7f8355be2289530c4a4494a47724e647f7b027afdce1b0d9c8cc3554d6a131c448513728c6afd3a56c6658c72a1c2c65aa4c0bc1dd5d724d86da466c278c5ac3b4a5961"}, {0x10, 0x286, 0xc7f1ed5}], 0x108}}], 0x7, 0x40) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x204000, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/123) 01:54:33 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000399000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:33 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07007400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 943.649344][T15072] loop5: p1 p2 p3 < > p4 [ 943.667956][T15072] loop5: p1 size 1946159103 extends beyond EOD, truncated [ 943.678501][T15071] loop1: p1 p2 p3 < > p4 [ 943.690449][T15072] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:54:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x101, 0x5, 0x81, 0x400, 0x40, 0x450}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = syz_open_pts(r8, 0x604400) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socket$alg(0x26, 0x5, 0x0) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x6, 0x40000) ioctl$TCSETSF(r9, 0x5412, &(0x7f0000000040)) [ 943.700854][T15071] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 943.719011][T15072] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 943.728297][T15071] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 943.774514][T15068] loop2: p1 < > p2 p3 < > p4 [ 943.774917][T15069] loop3: p1 p2 p3 < > p4 [ 943.794928][T15068] loop2: partition table partially beyond EOD, truncated [ 943.804598][T15069] loop3: partition table partially beyond EOD, truncated [ 943.815897][T15068] loop2: p1 start 153 is beyond EOD, truncated 01:54:33 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 943.826998][T15069] loop3: p1 start 37 is beyond EOD, truncated [ 943.838070][T15069] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 943.847903][T15068] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 943.856035][T15069] loop3: p3 start 225 is beyond EOD, truncated [ 943.862882][T15069] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="d6c321becd5edbd42595ed66a52b97c3b00dba78f14132a55f", 0x19}], 0x1, 0x0, 0x0, 0x810}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="e737a1aeea36ad711b0fd6a30ca47ce34a3c49c41fe11d3ef8eefc7c902e35dced333143c9dc9248d3c92dc5321cb60622ea869f62caa0dd1651bbb8ef6e77cfd449af8ce4", 0x45}, {&(0x7f0000000280)="316be1d83655dee582ea2329c8490ec10a8c9adbc780c51f6888efb10b3d4b6acc89a13746d569659dd6b2f009219828102577eda000364196750c8f30a3a695c9b79d89f1f8557f7f68abe76f3814e5de6fdeafc86aaecaa57c941eeb812dcd5ad17582fa47d2afda5e40c7f60ea61941eebcb00b954c28d3416a83e8be6f24000f10b133124bdd", 0x88}, {&(0x7f0000000340)="90038985c88ed53750eb3e167db9656dd2d42a9b7a9f2c624b2e5a40b37bf4fb94e98d10a17e0fa6984140770404459d798cd050551912e1dee1e5714bd7a80421ec94e467ae8a04e3552457aeae994b2325c26400d88a621b5cf163507da581f9ba1890eb79851ad7d9bdb99e2179c7a1d69fac2f60018553fcc6", 0x7b}, {&(0x7f00000003c0)="3b320632b890ae4e9bca0649b19d04b0ce8f0e7d5f8e5a767037badce333d660c496a04da8e58482da22d23a6e70480a13aea6463bd6b720480a5e5032d460ce34f4b19fe3bcc84705debeb412b2e17a89faa900", 0x54}, {&(0x7f0000000440)="006af78f486cbb5c86ebb93743", 0xd}, {&(0x7f0000000480)="5b21577bec965c597f72fd960e5c08e3364e03675ed79f53cd4da958ff7700ae6834b646f30231ec6b1799a07609c589363c0000e5a4b7de61a30e43ec8d6f61b917b3efe72ebb351cca6013994f1cc6a45e5ffd9270db30ef25cf49f5b72e796cbdf6c1f7057f8312c9c2dbe40e53b2c58a5e2979438afcda465dfb30df3b56410a2fc2db15263067c750039742b86a5e5bfb1f5e8ed15008e3f9dbb51b8b805447645e1ee00b2043f5ea1d3cdf29acbe243ed6abc6", 0xb6}, {&(0x7f0000000540)="f993aeef9b9e864872ecc8e911c0210991085f7ddff1b84daf9f55eef074933291b31170e718ed08dc00faccc701a9aa7dc1d937a96bee3328de141492f735cc", 0x40}], 0x7, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xffffffe1}], 0x18, 0x4}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="f7dd40fc589d5156fbf92f316306b7a6851808ad3ca467941935c9d9dcd9fca60cca6505bea73e4981b15516fe09d98beea3f915ecc86a936f5c5af6c2f9c4195bca332f99ae36bade95945d92562140695db4610f6a92de98ae7259a8b80764db2f897d6e29d343e3a8718d59c5656ad6e287fcda4a688fc0446247193126cc59da82a4555d1c1cc8a124625b39", 0x8e}, {&(0x7f0000000700)="367a05f33c60d693d696a55c85ab0570a59335254644902ce3c94816d6b22046d737c20894fb027443828b1cb871549b7610ab8e49ba4c623ec78b8ac2780dca6a3e67877812a88e960cf93389b11c1778ee8e2ffcc005d256e4dd83f391c758b989fe2e28c5b296a7035bac30238168400fd25523a244e4ede87b16ea6d5b127ab762ce930cc29e060dded7aa418d5ea661130b8cd73bf5e76abe8b7cbcb96e53d043c472b9f02afc3a50bfff116e99ef0ef1a5343525f0f547142e0586d5cfb6eb8aab864493145d0891f3a1b32a239facb8c86d41323265fc1bb2a82f081344643fc3", 0xe4}], 0x2, &(0x7f0000000840)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x20, 0x117, 0x2, 0x5, "be952d13f2"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xc8, 0x117, 0x2, 0xad, "6e8895d90286ad3b0782fb65ee513dda7fdc6289f71d4cc3143fac8b23fbe405d20c6196ec81d786ff4e89df874d98acabdd81406e695fe07dc905178f2205307829c63987e607e4f8967906d5e8a43c9d6bc053ed4eddcc25164ccffbbfd2bb7416ddc8d5d9ee5a9bd6a1960a9ccbc208b1b2fc9a3e346365ee7ef0db93c95e14602957b7bd838155d197c0f047915a7b6782610dd853d8e5a0652b97c22527a7a27caf58d905b125f79aed14"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x178, 0xc800}, {0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f00000009c0)="b34428fcdd408d438f6c97aa483843", 0xf}, {&(0x7f0000000a00)="5c2f025b67fc3fd9f5ae4e3bd2784a22e702abaeb68564bf14085bbdceed230a5067535d7bc918aa6a4f1e1a5f60438ce4caf86b6ee642fedb9736f20b22eaa543956546ea7adba41df6b619090959d1b3ca612f6c85cd05518865bbe85a083ce0541198ca6196a310ae19f2872d82d79e8b862781a12c605020c9e967f22eb976e7bc9abb8e3cd58b81ee14e130a1e69931df09afee5e62a5ade01993abd9e55dd0dc639e1e62bd4f7bf06738185d4046548b97a12c7a09b353a194c953c7b1d0ca65121762caca49a164a8d269f6b25ecedd262fc97ee81e298a7ee031a0abd71d8b9b59295346", 0xe8}, {&(0x7f0000000b00)="761c1c06df7852fa26af315081ce47ffa7f86a7282d734be7b479a226716d938a6dea43f5875336bf843d1bacb55b168bc8fa2bc", 0x34}, {&(0x7f0000000b40)="f3d6aaf1d624be2676f4addddec83e868d4353c3de47b0f124eed04bebee13295d0cc97778359f8ec25991b7dbb21385c797ace6968d4c4cfec95d6d491d33e0cf917d2c91fcd51fb359c906e106fcce737fbab2d120a8cf434605796316152b63d90cee26a256dace3872fccb30402322c41db6f32b27c95b6ef044ba9803e6f5f3485c79825e8ab3b325f541c6673457dbb228fdea0ae7289b45ba59cbaaa535", 0xa1}, {&(0x7f0000000c00)="43092bb88419bd8f8d4e97d7af5ea99068a0b3eede011393bde3013b9b033c7b9979a8f0e5fe94bef97585c5782772fabf5de2e9f93d27ce19a11eadb55f152e222b1598a5140722c1293f5bb6144cde5b12afa733b30e61064d31c80c5098a8fc528e7bd90f5f0c5114e79a5219cd44dfead8cb02832837328e7e8148d718bea7b7eb446fd7fd849013eaf06aeb5059e310e0e8c70586dda038e215e02f93ebbf8b3c9b88d1", 0xa6}, {&(0x7f0000000cc0)="301fdf8e8617e2eba60431dd8146ec10326d4f2cef48d25d3c70c7e9a3a7490548e10d97d2bf4eec01398cccd95b5ca20ec6a5690c3ef85a1021dee265784a156e63641561791661cb0ac3459b0d2e32211b78cc213c48cb0e9823d9afc9c791f75631cdb7aa8d07942af5a2eb0beb49033553726aece566f421a202bf31b4795715e0454bf19bde3e27880a78aa6ea4", 0x90}, {&(0x7f0000000d80)="281645d5b70ed9d3503255840f5ff6a944568c8f37d57eb62c6f67cfd392f4a56ecd7617a9a5b3134f061d0413641b0eef3b1a16901b7b18f9ba4000b829327336ac42218bfd210c411ea02f16abe078a8f808684076ffebec67426f066748a96c", 0x61}, {&(0x7f0000000e00)="c0f9e9198fa6aac635156c4d0d23014eb6143da4581774ffb626d113b53977ed07a9cd7a258a5e24b54fb8fb9280b2261a0d2d95b5baef933718723e1a604a38848c90fce65d91360fb5948e3d15f3d486a75d20a83fd3c168494e32f6928e0a1237ebbd1d0ea1ef342ef08ff887d40e6974de", 0x73}, {&(0x7f0000000e80)="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", 0x1000}], 0x9, &(0x7f0000001f40)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x1030, 0x4000000}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002f80)="695e7db184cd8dc407ce13a17c8d1db1227ea2b604ead52cfa6354ad85556da031c310c4ec609d0444c6d0e2a643c5c5afb50cbb8f635412a2da909600614426b320460501183a46539d6a260bf0ad76e9288ff09f1d1e278385c020386f84962f238fdbda056a4b6d93dca469d3804bd0a893ce6eb9fac8a8bc22e5f3fefa29148158f34cf40d1b8783ebd6775f59767de3040f8c4747d0e90ecc9501e08fa1e8b3312566c0df66363d448f2d67ea3646dff35b51de3bc97e9d5c04219a88706e57bf7f2689e8306d008e8559dd3b8f917c344bc30d3e907f8de67c4344b0c096702fabbf4a6cdc35f8affdb54b5c182e56bc803e94", 0xf6}, {&(0x7f0000003080)="0d08327b9eff46058a900f2cf2145f69efa0c4f885b9cfdf1f32ac7e435b78422561c37245ccb858aa38d2d05b2578607c28", 0x32}, {&(0x7f00000030c0)="cef98d2178bd9474a000b3d4509227d2d676c67d5ff142e4369bcee891d2f5cb8bcd99364e6c7180abc3383879ea4b35600c09cc2c83528f9cd3b5b8d8565bc57f9332bcb0c1952e3ade1552771e8e7ac34a19397ff39d93e4d33b527cb40cf1572b1522495b450438ca97fe68fe1489505154a734f411c5a37e87504fc51efc897773255061fc649add796e5eb69d4ff70cc53e6f7c44779d57990d4a100b02681709fd31557f6be54d6287c3debee78bb0d237da39a863555b601d133a5fb6fcfe954b85ce2a59ca590f71181a8620ae1764148b36595a5237475aac90bce0d1eb60e00b9dd07538ded9897342ad690e7fed0042ea810435", 0xf9}, {&(0x7f00000031c0)="d32f20658eb0973d00ffdca5c155c4a50474dc8fc4118f12d28f08bfc834435a099b395633671cb1bcd1a95d4e11975a68bcdc2ec1f42c16e7d339ff45b3914cd9f67769e7838aac83306d27bb96370a665eabc965b05742809d2133337ea4e6351e62533f730025f50e57f2", 0x6c}, {&(0x7f0000003240)="cce97d1650180a4b5c274a737f4a8b67012573efc1003a7ae497d41130ec270347718734a393b99b02012b6666b008715613c7891e9bc8b5590cdd363e404614bbf33e0f052b7d9961f17e498d866cd14d5d3b3e175e0994d7476680ef343f692cb2141aef58e4b2c670ec8f09bf0097530146827056f5f7586fdc149524d1d4a35ecd2b455040431f5f3226b9a5a5de670fcd20e9f8a0fb214c06f7c095b58a5fe81773d1252420c7e9bf494982", 0xae}], 0x5, &(0x7f0000003380)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x8c, "8539389d39f2acc0e8c3bebdb701371e604195fea1145ec36517957887d9f20f4b3c43213f2dc27f548c93a01b125f6ab75779c3f3d1cfff1512c133e753f5795df039ca06f05f1638f38e8d736f3f9fde48a11eb1409ac899cb1f4283c4e1eb71a950cd0a07a767ea63ad03a2e0dc9ecd4db336c5754cc3975aa144c65be875a2414c68b402344caa701a12"}, @iv={0xa8, 0x117, 0x2, 0x91, "70002f6731419fe2bd368281571d6b394c72c58f69b2b0c9cb592c246ebb90b9f2d111a466cb0a03276c512ae7396ff50a9e957a7c1c3466d4b354b2ecbedf1eb46acf935c5a3e7574df9e0c06072da246cdb4ab99cbd7d55bf46a4d1bf5d39e9948ce6fd0ba6fa696131813a39169668e29da6f4f0c06f483eb6b7608fb55eedc49650b24fd19fe4a915dfc9c9641747a"}, @iv={0x68, 0x117, 0x2, 0x50, "14eba25748456a4d92f1f4ad2130b1caf3b87d2ec15cfa4ee964c116d446461b8b5205a45e08d4dbf676415d90b2b424a0e7b7ac30c095419f25cdd7fb7b0d0a964ac8276d029910d3d3cf9dd862da90"}, @iv={0xd0, 0x117, 0x2, 0xb7, "8bd8d5121f433aad463a4a96b3648d08f6e9e4ca8d1fe9ad9006d8f580bf68daf743a39c15a1c049820e875048717c9dc72d30b6cd0dbf1f91ac3b33c5c9e497489ddd89194b720301402674a45e02cd0b2e8ed20133588f83bc93bc3142317541430bf295f8017ad25cc470fb11f5bb2ff3bd6c2478d7548bde84e512b52ea21f3cdbe49e8c842285b3b43826548281df92251cd8143ae56aac109a3164466476d198809048dc9fb4bb088eb64b681c7931714a03a27b"}], 0x2b0, 0x800}, {0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003640)="ee5d4005ff031d51ddc49501", 0xc}], 0x1, &(0x7f00000036c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x50, 0x117, 0x2, 0x37, "d764d0947eee0df49f98b582d988d538c2cee2caeb515d93947895f47e52f9a05cec383d110cabaaa98c8d85971198adc6dfe914a6fcd0"}, @assoc={0x18, 0x117, 0x4, 0xfffffff9}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x698}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x40, 0x117, 0x2, 0x26, "edf711c086b0c7f02f36312a8910ffe86157286ef9b2166660f850f851d1a10a02558b01d0d0"}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x150, 0x140d0}], 0x7, 0x4000000) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 943.873605][T15068] loop2: p3 start 225 is beyond EOD, truncated [ 943.886456][T15068] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:33 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07007a00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:34 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000039b000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 944.293011][T15227] loop1: p1 p2 p3 < > p4 [ 944.306399][T15227] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 944.342258][T15227] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 944.359004][T15312] loop5: p1 p2 p3 < > p4 [ 944.365355][T15312] loop5: p1 size 2046822399 extends beyond EOD, truncated [ 944.379836][T15312] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 944.394165][T15312] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 944.443139][T15320] loop2: p1 < > p2 p3 < > p4 [ 944.457239][T15320] loop2: partition table partially beyond EOD, truncated [ 944.486672][T15320] loop2: p1 start 155 is beyond EOD, truncated [ 944.495721][T15320] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 944.505070][T15320] loop2: p3 start 225 is beyond EOD, truncated [ 944.515786][T15320] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 944.627987][T15320] loop2: p1 < > p2 p3 < > p4 [ 944.638258][T15320] loop2: partition table partially beyond EOD, truncated [ 944.646205][T15320] loop2: p1 start 155 is beyond EOD, truncated [ 944.657083][T15320] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 944.678499][T15320] loop2: p3 start 225 is beyond EOD, truncated [ 944.684679][T15320] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:36 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:36 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300005e37000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = socket(0x11, 0x3, 0x0) close(r6) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x24, r7, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x980a}]}]}, 0x24}}, 0x20cc0d1) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12000400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb8, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x4}]}, 0xb8}}, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:36 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07028000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:36 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000007c5000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 946.693124][T15459] loop5: p1 p2 p3 < > p4 [ 946.704702][T15459] loop5: p1 size 2147616767 extends beyond EOD, truncated 01:54:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f00000000c0)=0x516) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7ff, 0x81, 0x0, 0x8, 0xa, 0x3c, 0x0, 0x4, 0x74, 0x40}) socket(0x4, 0x8101b, 0x5) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000400)=""/171, 0x12a}], 0x3, 0x6) [ 946.737416][T15459] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 946.747071][T15459] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 946.817760][T15455] loop2: p1 < > p2 p3 < > p4 [ 946.817762][T15458] loop3: p1 p2 p3 < > p4 [ 946.817773][T15458] loop3: partition table partially beyond EOD, truncated [ 946.823422][T15454] loop1: p1 p2 p3 < > p4 [ 946.840924][T15458] loop3: p1 start 55 is beyond EOD, truncated [ 946.847099][T15455] loop2: partition table partially beyond EOD, truncated [ 946.872915][T15458] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 946.898761][T15454] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 946.913094][T15454] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 946.922231][T15455] loop2: p1 start 197 is beyond EOD, truncated 01:54:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07009000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 946.975394][T15455] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 946.992875][T15458] loop3: p3 start 225 is beyond EOD, truncated [ 947.004368][T15455] loop2: p3 start 225 is beyond EOD, truncated [ 947.014244][T15455] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 947.021805][T15458] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:37 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 947.094196][T15579] print_req_error: 2084 callbacks suppressed [ 947.094207][T15579] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 947.118221][T15455] __loop_clr_fd: partition scan of loop2 failed (rc=-16) 01:54:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ubi_ctrl\x00', 0x80, 0x0) accept4$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @empty}, &(0x7f0000000500)=0x10, 0x80400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x1, 0x9}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r2 = syz_open_pts(r1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x403, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0xbda, 0x40, 0x7, 0x2e4, 0x7f, 0xfb, 0x7, 0x4, 0x3, 0x9, 0x6, 0x1}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000100)={0x47f, 0x8, 0x100000001, 0x9, 0xffff, 0x1}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x8a69, 0x50db, 0x0, 0x0, 0x0, 0x6, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x40000, 0x0) [ 947.199232][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.210241][ T2505] buffer_io_error: 1785 callbacks suppressed [ 947.210250][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.225078][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.236363][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.244813][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.256727][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.265077][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.276182][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.284467][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.295698][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.303997][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.314969][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.324530][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.335467][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read 01:54:37 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000007cd000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:37 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000040000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 947.343694][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.354613][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.362845][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.373790][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.382032][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 947.447064][T15686] loop5: p1 p2 p3 < > p4 [ 947.456837][T15686] loop5: p1 size 2415921151 extends beyond EOD, truncated [ 947.511258][T15747] loop1: p1 p2 p3 < > p4 [ 947.519532][T15747] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 947.532546][T15686] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 947.540850][T15747] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 947.554077][T15686] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 947.589459][T15800] loop3: p1 p2 p3 < > p4 [ 947.597754][T15800] loop3: partition table partially beyond EOD, truncated [ 947.614514][T15800] loop3: p1 start 64 is beyond EOD, truncated [ 947.620901][T15800] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 947.629101][T15800] loop3: p3 start 225 is beyond EOD, [ 947.629104][T15800] truncated [ 947.629114][T15800] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.653911][T15799] loop2: p1 < > p2 p3 < > p4 [ 947.676832][T15799] loop2: partition table partially beyond EOD, truncated [ 947.686820][T15799] loop2: p1 start 205 is beyond EOD, truncated [ 947.694815][T15799] loop2: p2 size 1073741824 extends beyond EOD, [ 947.701736][T15799] truncated [ 947.708497][T15799] loop2: p3 start 225 is beyond EOD, truncated [ 947.714808][T15799] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:39 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x1, 0x6, 0x9}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:39 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0764ad00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:39 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:39 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000001ed000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:39 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x9}) [ 949.848183][T15852] loop2: p1 < > p2 p3 < > p4 [ 949.854957][T15853] loop5: p1 p2 p3 < > p4 [ 949.865042][T15849] loop3: p1 p2 p3 < > p4 [ 949.866109][T15852] loop2: partition table partially beyond EOD, truncated [ 949.872545][T15849] loop3: partition table partially beyond EOD, truncated [ 949.901279][T15851] loop1: p1 p2 p3 < > p4 [ 949.902256][T15852] loop2: p1 start 237 is beyond EOD, truncated [ 949.922654][T15853] loop5: p1 size 2909014015 extends beyond EOD, truncated [ 949.937081][T15849] loop3: p1 start 100 is beyond EOD, truncated [ 949.943831][T15852] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 949.951575][T15849] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 949.960791][T15851] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 949.971932][T15853] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 949.982331][T15852] loop2: p3 start 225 is beyond EOD, truncated [ 949.991077][T15849] loop3: p3 start 225 is beyond EOD, truncated [ 949.991245][T15852] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 950.006322][T15849] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 950.017284][T15853] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x20020, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) [ 950.049219][T15851] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:40 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000ffff7f0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:40 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000ed010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:40 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0702b000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:40 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300007792000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 950.686469][T16151] loop1: p1 p2 p3 < > p4 [ 950.699604][T16151] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 950.711032][T16151] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 950.835125][T16197] loop2: p1 < > p2 p3 < > p4 [ 950.840743][T16198] loop3: p1 p2 p3 < > p4 [ 950.845748][T16200] loop5: p1 p2 p3 < > p4 [ 950.855467][T16198] loop3: partition table partially beyond EOD, truncated [ 950.857236][T16197] loop2: partition table partially beyond EOD, truncated [ 950.870214][T16198] loop3: p1 start 146 is beyond EOD, truncated [ 950.876650][T16198] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 950.886275][T16200] loop5: p1 size 2952923135 extends beyond EOD, truncated [ 950.896608][T16198] loop3: p3 start 225 is beyond EOD, truncated [ 950.903916][T16198] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 950.927804][T16197] loop2: p1 start 32767 is beyond EOD, truncated [ 950.935303][T16200] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 950.947894][T16197] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 950.975734][T16200] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 950.986372][T16197] loop2: p3 start 225 is beyond EOD, truncated [ 950.993619][T16197] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:42 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x7, 0x8000, 0xffff, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x400006, 0x7fff, 0x3}) r1 = syz_open_pts(r0, 0xb7f45d3c2147ad73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x26d) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:42 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000099030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:42 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0703b200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:42 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000399000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:42 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000002000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) [ 952.826320][T16245] loop5: p1 p2 p3 < > p4 [ 952.841543][T16245] loop5: p1 size 2986543103 extends beyond EOD, truncated [ 952.852397][T16245] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 952.862366][T16245] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 952.912650][T16240] loop3: p1 p2 p3 < > p4 [ 952.917328][T16244] loop1: p1 p2 p3 < > p4 [ 952.933783][T16246] loop2: p1 < > p2 p3 < > p4 [ 952.945176][T16244] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 952.953065][T16240] loop3: partition table partially beyond EOD, truncated [ 952.960577][T16246] loop2: partition table partially beyond EOD, truncated [ 952.982898][T16240] loop3: p1 start 153 is beyond EOD, truncated [ 952.989578][T16246] loop2: p1 start 2 is beyond EOD, truncated [ 953.001211][T16246] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 953.014675][T16240] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 953.024666][T16244] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 953.051644][T16246] loop2: p3 start 225 is beyond EOD, truncated [ 953.053346][T16240] loop3: p3 start 225 is beyond EOD, truncated 01:54:42 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700d000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 953.091533][T16246] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 953.099641][T16240] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x25, 0x1, @thr={&(0x7f00000002c0)="8d9e46853e84d6f58481278bd0720bbd3807137da81ca8b236c1c4232543dff7af95dd44ad9c8580364d4aa203a10a8c6685c72b49ea6249eab8bbb20b7d91011ec13e5cfad6a97967c8552b23fc7c29ae2fa6200f6157b79d2b68b3d91b2cd97de9ba826a229b10196735e38afc02541711aa4bd06c4d7bb63af75d93f06942c33742ec840f93c70ca60a4a6f2d01ac26bd401beef9e738302cb6a1507d0036764e7dba7feb40a68235e72936434ba6bc31332125014dc6d4582204e01132b28d986445efcd5d345fa8f906fc1462a54d79c6d16f210893b253764159fa36ee48", &(0x7f00000000c0)="9c2a6099e13d0c0737d0c94497a462feb3d39d001dbdf771d27bc13f54533c6ae9d0169c0cb8825fa970c81c2c2fb4f7e0cf6b32b1af5e8ea0f49c78cdf6c2f0c001822363aa826e978c4e0e4094fc033b3f28bd84962281558ed1f45bb56e48bcf7a5af47ef11285ea7e1c4e36510a339a2373518986cf461c9e6663a2b85cd52d0a371299f4cfe7769647228b6b8ce0d2e97d66dd122534883defff4"}}, &(0x7f0000000200)=0x0) timer_delete(r1) r2 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000080)={0xfffb, 0x0, 0x0, 0x8, 0x6, 0x0, 0x1, 0x0, 0xffffffff}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) [ 953.278273][T16469] print_req_error: 1 callbacks suppressed [ 953.278284][T16469] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 953.298285][T16240] __loop_clr_fd: partition scan of loop3 failed (rc=-16) 01:54:43 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000009b030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 953.404626][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.415691][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.429524][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.440789][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.451573][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.462986][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.471754][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.482814][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.483421][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.501899][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read 01:54:43 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000003000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x59) pidfd_send_signal(r3, 0x1f, &(0x7f0000000100)={0x2, 0x3, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r9, 0x551f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r12, 0x5459, &(0x7f00000000c0)) r13 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r13, 0x5412, &(0x7f0000000040)) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='/dev/ptmx\x00') r14 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x202400, 0x0) fsconfig$FSCONFIG_SET_BINARY(r14, 0x2, &(0x7f0000000340)='#$*\xc7eth1vmnet0\x00', &(0x7f0000000380)="a5152bf340938e89ccb66b2e49c307275d4933563f3cef3cb2ae0b4dcd40bdf8ea1cafd1e40b6935a4dffedda64dda54d961657f194eea4d8f0ec6e51277966f8ba7b17ad3868d9aae2834a22256a05d9e0f9254e715cd95ba88a090bb4969b657cb6d0ee1f9875c3a7667192c2c43091354202e5fd659994fb4036d30123da76e9423135cef585e4ea43fb3497dae81c7cb4419650ec5e15ccdfb9578046783a59ea1c40ebf65e37f81f9f66bb31b68bcf56444514ef4", 0xb7) [ 953.530355][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.541786][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.563981][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.575345][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.583610][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 953.594474][T16481] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 953.607735][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 953.615818][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 953.624521][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 953.643381][T16475] loop5: p1 p2 p3 < > p4 [ 953.648075][T16475] loop5: p1 size 3489662975 extends beyond EOD, truncated [ 953.680145][T16475] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 953.704032][T16475] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 953.852581][T16593] loop1: p1 p2 p3 < > p4 [ 953.865964][T16593] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 953.875070][T16593] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 953.886211][T16594] loop2: p1 < > p2 p3 < > p4 [ 953.897611][T16594] loop2: partition table partially beyond EOD, truncated [ 953.958666][T16594] loop2: p1 start 3 is beyond EOD, truncated [ 953.972370][T16594] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 954.066207][T16594] loop2: p3 start 225 is beyond EOD, truncated [ 954.096068][T16594] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) write(r4, &(0x7f00000002c0)="89b47a6256cb7354e06c97e3339c8c980721c00cedf72d592af764fbef05605a0991cd5d5b5f5db59360f748194dce10467d1024c040c7224574125e8a03d6a9491102ff6f3e1c149f3d6b5d0f01d60cc835ce23689664a35aa6d210edc38595b1aeb656481d17a4c4dbd7bde0cde2fa296fe9447bfa1a7164fefdc758f680eb3d997044d3671da0bfc93570e8cae225381596fde40b4d3f54626f1f22a64f48df21676bddeba1cd86ea2b20a636a3cf45f0b574a772a35321cd0a81ab3c531d4a1d2557005753497ac6ed", 0xcb) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0xfd}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f00000000c0)=0x7) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:45 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:45 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000039b000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700d200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:45 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000c8070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:45 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000004000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfff, 0x1000}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x101, 0xfff, 0xed, 0x5}, 'syz0\x00', 0x9}) ioctl$TIOCEXCL(r4, 0x540c) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xecfb}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x7, 0x6, 0x1, 0x5, 0x6, 0x40, 0x3, 0x4, 0x2, 0xe0000000, 0x5, 0x81}) [ 955.850657][T16726] loop3: p1 p2 p3 < > p4 [ 955.855955][T16726] loop3: partition table partially beyond EOD, truncated [ 955.864628][T16726] loop3: p1 start 155 is beyond EOD, truncated [ 955.871354][T16726] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 955.880706][T16726] loop3: p3 start 225 is beyond EOD, truncated [ 955.896837][T16727] loop5: p1 p2 p3 < > p4 [ 955.917591][T16726] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 955.935997][T16727] loop5: p1 size 3523217407 extends beyond EOD, truncated [ 955.946800][T16727] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 955.958130][T16727] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 955.966155][T16730] loop2: p1 < > p2 p3 < > p4 [ 955.971873][T16730] loop2: partition table partially beyond EOD, truncated [ 955.990445][T16728] loop1: p1 p2 p3 < > p4 [ 956.001839][T16730] loop2: p1 start 4 is beyond EOD, truncated [ 956.014432][T16728] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 956.025073][T16730] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 956.046010][T16728] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 956.069938][T16730] loop2: p3 start 225 is beyond EOD, truncated 01:54:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700ee00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) init_module(&(0x7f00000000c0)='eth1\x00', 0x5, &(0x7f0000000100)='bdevmd5sum\x00') r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 956.118738][T16730] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:46 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000007c8000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000cd070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 956.420971][T16957] loop5: p1 p2 p3 < > p4 [ 956.430229][T16957] loop5: p1 size 3992979455 extends beyond EOD, truncated 01:54:46 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 956.499159][T16957] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:54:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @empty}}}, 0x84) [ 956.542590][T16957] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 956.598509][T16975] loop3: p1 p2 p3 < > p4 [ 956.659321][T16975] loop3: partition table partially beyond EOD, truncated [ 956.677773][T16975] loop3: p1 start 200 is beyond EOD, truncated [ 956.687065][T16975] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 956.695608][T16975] loop3: p3 start 225 is beyond EOD, truncated [ 956.702398][T16975] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.730787][T16970] loop1: p1 p2 p3 < > p4 [ 956.753675][T16970] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 956.790403][T16970] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 956.822341][T17083] loop2: p1 < > p2 p3 < > p4 [ 956.856917][T17083] loop2: partition table partially beyond EOD, truncated [ 956.933466][T17083] loop2: p1 start 7 is beyond EOD, truncated [ 956.970098][T17083] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 956.986345][T17083] loop2: p3 start 225 is beyond EOD, truncated [ 957.012650][T17083] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:48 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070fff00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:48 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000007cd000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:48 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000042350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:48 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000008000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e22, @remote}}}, &(0x7f00000001c0)=0x84) r7 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 958.889773][T17224] loop2: p1 < > p2 p3 < > p4 [ 958.897940][T17229] loop3: p1 p2 p3 < > p4 [ 958.898094][T17224] loop2: partition table partially beyond EOD, truncated [ 958.910170][T17224] loop2: p1 start 8 is beyond EOD, truncated [ 958.913183][T17229] loop3: partition table partially beyond EOD, truncated [ 958.920850][T17224] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 958.933413][T17229] loop3: p1 start 205 is beyond EOD, truncated [ 958.941798][T17224] loop2: p3 start 225 is beyond EOD, truncated [ 958.944719][T17229] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 958.948953][T17224] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 958.980103][T17229] loop3: p3 start 225 is beyond EOD, truncated [ 958.994353][T17225] loop1: p1 p2 p3 < > p4 [ 959.005344][T17229] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 959.014674][T17231] loop5: p1 p2 p3 < > p4 [ 959.021968][T17225] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 959.033212][T17231] loop5: p1 size 4279175167 extends beyond EOD, truncated [ 959.046763][T17231] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 959.066407][T17231] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 959.100105][T17225] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x101, 0x6]) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 01:54:49 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:49 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000038d1000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:49 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000043350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 959.633512][T17467] loop3: p1 p2 p3 < > p4 [ 959.640982][T17467] loop3: partition table partially beyond EOD, truncated [ 959.658085][T17467] loop3: p1 start 209 is beyond EOD, truncated [ 959.665497][T17467] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 959.674457][T17467] loop3: p3 start 225 is beyond EOD, truncated [ 959.681333][T17467] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 959.739221][T17572] loop1: p1 p2 p3 < > p4 [ 959.768709][T17572] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 959.792330][T17572] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 959.802510][T17465] loop2: p1 < > p2 p3 < > p4 [ 959.818265][T17465] loop2: partition table partially beyond EOD, truncated [ 959.825824][T17465] loop2: p1 start 18 is beyond EOD, truncated [ 959.838712][T17465] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 959.847033][T17465] loop2: p3 start 225 is beyond EOD, truncated [ 959.860045][T17579] loop5: p1 p2 p3 < > p4 [ 959.869764][T17579] loop5: p1 size 33556479 extends beyond EOD, truncated [ 959.890128][T17579] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 959.897434][T17465] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 959.933329][T17579] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:51 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x10000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:51 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000044350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:51 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000038d5000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:51 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000300ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r3, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x101) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000000c0)={0x2, 0x1d, "c6d871e5ab743feb17050d668f9b7b1dbc4b8c2baa7bd3565e8fb42d1a"}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 961.924766][T17621] loop3: p1 p2 p3 < > p4 [ 961.929411][T17621] loop3: partition table partially beyond EOD, truncated [ 961.936982][T17621] loop3: p1 start 213 is beyond EOD, truncated [ 961.944934][T17621] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 961.959296][T17621] loop3: p3 start 225 is beyond EOD, truncated [ 961.966547][T17621] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 962.064542][T17622] loop2: p1 < > p2 p3 < > p4 [ 962.070286][T17629] loop1: p1 p2 p3 < > p4 [ 962.082499][T17622] loop2: partition table partially beyond EOD, truncated [ 962.097286][T17629] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:54:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{}]}) syz_open_procfs(0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x620}) [ 962.124555][T17622] loop2: p1 start 37 is beyond EOD, truncated [ 962.131320][T17622] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 962.131390][T17629] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 962.156104][T17622] loop2: p3 start 225 is beyond EOD, truncated [ 962.177600][T17633] loop5: p1 p2 p3 < > p4 [ 962.200360][T17622] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 962.208454][T17633] loop5: p1 size 50333695 extends beyond EOD, truncated [ 962.225068][T17633] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:54:52 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000e1000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:52 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000456b0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 962.313920][T17633] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:52 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000042000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 962.568963][T17958] loop3: p1 p2 p3 < > p4 [ 962.577968][T17958] loop3: partition table partially beyond EOD, truncated [ 962.615596][T17958] loop3: p1 start 225 is beyond EOD, truncated [ 962.638716][T17957] loop1: p1 p2 p3 < > p4 [ 962.648361][T17958] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 962.663907][T17957] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 962.686595][T17958] loop3: p3 start 225 is beyond EOD, truncated [ 962.706969][T17957] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 962.722146][T17958] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 962.788004][T17967] loop2: p1 < > p2 p3 < > p4 [ 962.793995][T17967] loop2: partition table partially beyond EOD, truncated [ 962.841229][T17967] loop2: p1 start 66 is beyond EOD, truncated [ 962.874965][T17967] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 962.889164][T17967] loop2: p3 start 225 is beyond EOD, truncated [ 962.908237][T17969] loop5: p1 p2 p3 < > p4 [ 962.913728][T17967] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 962.924497][T17969] loop5: p1 size 67110911 extends beyond EOD, truncated [ 962.934936][T17969] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 962.949780][T17969] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:54 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000080)={0x1a9, 0x0, 0x0, 0x8, 0x8}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000100)=0xfffff800) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000002c0)=""/211, 0x8000, 0x400, 0x3}, 0x18) 01:54:54 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000007900000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:54 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000043000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:54 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000ffff7f0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='7', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r2, r2}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x00\x00\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\xd5~\xa0+_\x82{\xbf\xb2\xabqT?\x9e\xbf\x17\x00'}}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r4) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r5) r6 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="50cddf573adafb60aa5c56115918c95936377e1c5e1e118dbdaf07680b820f417283fb672e83e646bc8042806f6af3fc227eac9c074313d6a38b4bc72a64d74b300ebe056aab4a1b597052298efcb5e08a1adeb577db3b89b1f628cbc8188ae6764ec3bdb241154896c53cd3c57bac256a92cc2030e055aaf9bd1036e7d3723e9f75146810ab638594c364e86fad2494d42b5ca1823cb52f04510de0d3128f760ab97009ebca9faf5dd1274e312ac8c5bab1989d6cd9e9fbe68d0f9028", 0xbd, r5) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r6}, &(0x7f0000000340)=""/67, 0x43, &(0x7f0000000500)={&(0x7f00000003c0)={'sha512-ssse3\x00'}, &(0x7f0000000400)="5cb97a1a4f28307d0f38a24a3c3a9b2e0f88fc9abe33543280ca5008fe3ede04068c5478a71be748e62bcce2ed8aa6ebf9418550a277dcc9677944143fbc5e2cdd69159ec16b7676e86654ce4f22c233ef8e1f62a80428f3ab4dd4796b1a3fd64f1675f032e8d5ddcfafbbb5e62bf12d78d54e8f5bbc675bf2c71b2513e54780019d2c55bd091c0304eb579f6e3d6aa1d726e8cc937daff272097f3e8e9a94a5ba82bbd5b1ac080150a82308376dbb0c8d1f763c3e9b4aa30e43f9c8ae2dd93e08eacc8bf805d20113cb16745eaaa3c34a4637547275706f4d91d9d68c082ada946796f0dde3bcdfa8c02681e1ed07b074a0a0b89686a284f54c", 0xfa}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025000000000000a39500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r8, r1, 0x0, 0x0, 0x0}, 0x30) sched_setscheduler(r8, 0x2, &(0x7f00000000c0)=0x8) [ 965.049088][T18016] loop3: p1 p2 p3 < > p4 [ 965.054028][T18018] loop1: p1 p2 p3 < > p4 [ 965.067576][T18016] loop3: partition table partially beyond EOD, truncated [ 965.089536][T18018] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 965.099044][T18019] loop5: p1 p2 p3 < > p4 [ 965.105935][T18019] loop5: p1 size 83888127 extends beyond EOD, truncated [ 965.114210][T18016] loop3: p1 start 32767 is beyond EOD, truncated [ 965.126121][T18019] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 965.134837][T18016] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 965.142997][T18020] loop2: p1 < > p2 p3 < > p4 [ 965.150453][T18016] loop3: p3 start 225 is beyond EOD, truncated [ 965.157045][T18016] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.164879][T18020] loop2: partition table partially beyond EOD, truncated [ 965.177495][T18020] loop2: p1 start 67 is beyond EOD, truncated [ 965.185010][T18018] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 965.193228][T18019] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 965.197690][T18020] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 965.245004][T18020] loop2: p3 start 225 is beyond EOD, truncated [ 965.253744][T18020] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/\x04\x00\xedx\x00', 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ppoll(&(0x7f00000000c0)=[{r2, 0x100}, {r0, 0x50a0}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:54:55 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000e2a70000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:55 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000600ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:55 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000044000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:55 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000002000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:55 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:54:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000000c0)=""/148) [ 965.828480][T18292] loop1: p1 p2 p3 < > p4 [ 965.835253][T18292] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 965.849864][T18292] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 965.993388][T18330] loop3: p1 p2 p3 < > p4 [ 966.006997][T18368] loop2: p1 < > p2 p3 < > p4 [ 966.015017][T18366] loop5: p1 p2 p3 < > p4 [ 966.023248][T18366] loop5: p1 size 100665343 extends beyond EOD, truncated [ 966.030984][T18330] loop3: partition table partially beyond EOD, truncated 01:54:55 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000064250300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 966.040364][T18330] loop3: p1 start 2 is beyond EOD, truncated [ 966.042199][T18368] loop2: partition table partially beyond EOD, truncated [ 966.047316][T18330] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 966.069331][T18330] loop3: p3 start 225 is beyond EOD, truncated [ 966.079176][T18366] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 966.082664][T18330] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0xfffe, 0x0, 0x8, 0x1}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 966.099410][T18366] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 966.128371][T18368] loop2: p1 start 68 is beyond EOD, truncated [ 966.155067][T18368] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 966.173052][T18368] loop2: p3 start 225 is beyond EOD, truncated [ 966.200081][T18368] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000700ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100)={0x8, 0x10001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)={0x5, 0x9, 0x1, 0x0, 0x80000, 0x1f, 0x1, 0x5, 0x5, 0x24, 0x81, 0x6a, 0x0, 0x81, 0x8001, 0x50, 0x1f, 0x8, 0x6}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) 01:54:56 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:56 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000045000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 966.518779][T18590] loop1: p1 p2 p3 < > p4 [ 966.557053][T18590] loop1: partition table partially beyond EOD, truncated [ 966.575088][T18590] loop1: p1 start 206180 is beyond EOD, truncated [ 966.595294][T18590] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 966.635817][T18590] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 966.681162][T18612] loop5: p1 p2 p3 < > p4 [ 966.685744][T18612] loop5: p1 size 117442559 extends beyond EOD, truncated 01:54:56 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) [ 966.722927][T18612] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 966.732487][T18612] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 966.748625][T18621] loop2: p1 < > p2 p3 < > p4 [ 966.775615][T18621] loop2: partition table partially beyond EOD, truncated [ 966.795813][T18621] loop2: p1 start 69 is beyond EOD, truncated [ 966.822492][T18614] loop3: p1 p2 p3 < > p4 [ 966.838649][T18621] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 966.846990][T18614] loop3: partition table partially beyond EOD, truncated [ 966.870883][T18621] loop2: p3 start 225 is beyond EOD, truncated [ 966.884041][T18614] loop3: p1 start 3 is beyond EOD, truncated 01:54:56 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000000000040ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 966.938004][T18614] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 966.959171][T18621] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:56 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000800ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 966.984542][T18614] loop3: p3 start 225 is beyond EOD, truncated [ 967.037356][T18614] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:54:56 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r4 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000002c0)='ppp0\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000056c0)='fou\x00') sendmsg$FOU_CMD_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf25130000001400090000000000000000000000ffffffffffff080002000000010008000800ac1e0006000000000014000900fe80000000aa00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 967.141339][T18733] print_req_error: 12 callbacks suppressed [ 967.141349][T18733] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 967.182135][T18621] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 967.214271][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.218415][T18738] loop1: p1 p2 p3 < > p4 [ 967.225681][ T2504] buffer_io_error: 10 callbacks suppressed [ 967.225689][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.252140][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.267670][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.278241][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.289230][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.289395][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.297399][T18738] loop1: partition table partially beyond EOD, truncated [ 967.308235][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.323822][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.334760][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.342973][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.354405][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.362857][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.373785][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read 01:54:57 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000004000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 967.382304][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.393252][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.393799][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 967.412670][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 967.421368][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read 01:54:57 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000046000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 967.458704][T18738] loop1: p1 start 1073741824 is beyond EOD, truncated [ 967.480277][T18738] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:54:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x18800, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000140)=0x8, 0x4) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0x101) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x8}}, 0x5, 0x200}, 0x90) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 967.531972][T18740] loop5: p1 p2 p3 < > p4 [ 967.539098][T18738] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 967.553133][T18740] loop5: p1 size 134219775 extends beyond EOD, truncated [ 967.584214][T18740] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 967.623927][T18740] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:57 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) 01:54:57 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a020000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 967.739142][T18855] loop3: p1 p2 p3 < > p4 [ 967.768315][T18855] loop3: partition table partially beyond EOD, truncated [ 967.782624][T18855] loop3: p1 start 4 is beyond EOD, truncated [ 967.802154][T18855] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 967.815552][T18740] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 967.848551][T18855] loop3: p3 start 225 is beyond EOD, truncated [ 967.866984][T18861] loop2: p1 < > p2 p3 < > p4 01:54:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xca0954080f0f221c, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffb) exit(0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f00000001c0)='\x99GPLcpusetem0\x00', 0x41, 0x100, &(0x7f0000000200)={0x7, 0x8000, 0x1f, 0x4, 0x8, 0x180, 0x8, 0x7}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KIOCSOUND(r8, 0x4b2f, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r11, 0x6}, 0x10) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x807, 0xe7cd, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x9}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 967.890995][T18855] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 967.916299][T18861] loop2: partition table partially beyond EOD, truncated 01:54:57 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000900ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 967.997892][T18861] loop2: p1 start 70 is beyond EOD, truncated [ 968.004276][T18861] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 968.023879][T18861] loop2: p3 start 225 is beyond EOD, truncated [ 968.032614][T18861] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 968.130551][T18975] loop1: p1 p2 p3 < > p4 [ 968.155307][T18975] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 968.199337][T18975] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:54:58 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000007000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:58 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000047000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 968.359070][T18975] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 968.398021][T18992] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:54:58 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:58 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000a00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 968.608422][T19004] loop3: p1 p2 p3 < > p4 [ 968.612939][T19004] loop3: partition table partially beyond EOD, truncated [ 968.632426][T19004] loop3: p1 start 7 is beyond EOD, truncated [ 968.645840][T19004] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 968.654435][T19005] loop2: p1 < > p2 p3 < > p4 [ 968.659389][T19005] loop2: partition table partially beyond EOD, truncated [ 968.666934][T19004] loop3: p3 start 225 is beyond EOD, truncated [ 968.677846][T19004] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 968.685994][T19005] loop2: p1 start 71 is beyond EOD, truncated [ 968.701296][T19005] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:54:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 968.721734][T19010] loop1: p1 p2 p3 < > p4 [ 968.734314][T19010] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 968.773444][T19010] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 968.824163][T19005] loop2: p3 start 225 is beyond EOD, truncated [ 968.851905][T19005] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:54:58 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000008000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x421080, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) [ 968.909116][T19015] loop5: p1 p2 p3 < > p4 [ 968.921313][T19015] loop5: p1 size 167774207 extends beyond EOD, truncated [ 968.938799][T19015] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 968.951700][T19015] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 969.078727][T19010] __loop_clr_fd: partition scan of loop1 failed (rc=-16) 01:54:59 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000b00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:59 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000049000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:59 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 969.365875][T19174] loop3: p1 p2 p3 < > p4 [ 969.376762][T19174] loop3: partition table partially beyond EOD, truncated [ 969.413112][T19174] loop3: p1 start 8 is beyond EOD, truncated 01:54:59 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x800000, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/\xe7\b\x8e\xc1\x7f\x1f>\xa1\x02', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) syz_open_pts(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000001c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCLINUX5(r10, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x1, 0xfffffffffffffff9, 0xa7d4}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCSETSF(r7, 0x5412, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffbff, 0x7, 0x0, 0x59}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000002c0)=r14) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r13, 0xab01, 0x0) [ 969.453964][T19174] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 969.491438][T19174] loop3: p3 start 225 is beyond EOD, truncated [ 969.519377][T19174] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 969.545810][T19345] loop2: p1 < > p2 p3 < > p4 [ 969.553184][T19345] loop2: partition table partially beyond EOD, truncated [ 969.570277][T19345] loop2: p1 start 73 is beyond EOD, truncated [ 969.590739][T19345] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 969.612446][T19345] loop2: p3 start 225 is beyond EOD, truncated 01:54:59 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a050000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80c80) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r10 = fcntl$dupfd(r9, 0xe403003c16248ff1, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_G_INPUT(r10, 0x80045626, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80000000}) [ 969.624656][T19345] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 969.678678][T19346] loop5: p1 p2 p3 < > p4 01:54:59 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 969.703886][T19346] loop5: p1 size 184551423 extends beyond EOD, truncated 01:54:59 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000009000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:54:59 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004b000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 969.847922][T19346] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 969.877575][T19346] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:54:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x2000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x6, 0x4) [ 969.916339][T19568] loop1: p1 p2 p3 < > p4 [ 969.949062][T19568] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 969.971527][T19568] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 970.007905][T19346] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:54:59 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 970.098581][T19579] loop3: p1 p2 p3 < > p4 [ 970.102955][T19579] loop3: partition table partially beyond EOD, truncated [ 970.117051][T19579] loop3: p1 start 9 is beyond EOD, truncated [ 970.123863][T19579] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 970.132363][T19579] loop3: p3 start 225 is beyond EOD, truncated [ 970.139192][T19579] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r0, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x7f, 0xffff, 0xffffffff}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}) r10 = syz_open_pts(r9, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r10, 0x5412, &(0x7f0000000040)={0x52b, 0x9, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x8}) 01:55:00 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a060000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 970.238484][T19587] loop2: p1 < > p2 p3 < > p4 [ 970.243457][T19587] loop2: partition table partially beyond EOD, truncated [ 970.263633][T19587] loop2: p1 start 75 is beyond EOD, truncated [ 970.273225][T19587] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 970.329214][T19587] loop2: p3 start 225 is beyond EOD, truncated [ 970.354845][T19587] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 970.447630][T19696] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) 01:55:00 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000012000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000021c0)={'nat\x00'}, &(0x7f0000002240)=0x54) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x2, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="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"}}, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) [ 970.618447][T19708] loop1: p1 p2 p3 < > p4 01:55:00 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004d000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 970.658493][T19708] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:00 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000d00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:00 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) [ 970.713549][T19708] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 970.830492][T19818] loop3: p1 p2 p3 < > p4 [ 970.836098][T19818] loop3: partition table partially beyond EOD, truncated 01:55:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ptmx\x00', 0x311a40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f0000000980)={0x3, 0x70, 0x7, 0x20, 0x2, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={&(0x7f0000000680), 0xc}, 0x0, 0x200, 0x705b8b34, 0x1, 0x61, 0x6, 0x81}, 0x0, 0x7, 0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x80002, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x810, 0xffffffffffffffff, 0x100000000) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x25c) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000b40)={0x104ed, 0x2}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2f6, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x84}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000b00)={@rand_addr=0xffffa0f5, @rand_addr=0x4, r10}, 0xc) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000001c0)=""/88, 0xfffffffffffffe4a}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000140)=""/51, 0x33}], 0x6}, 0x3}, {{&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/76, 0x4c}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000180)=""/51, 0x33}], 0x4, &(0x7f0000000900)=""/85, 0x55}, 0x5}], 0x2, 0x20, &(0x7f0000000a40)={r11, r12+30000000}) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) r13 = syz_open_pts(r0, 0x0) syz_open_dev$mice(&(0x7f0000000b80)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r14 = creat(&(0x7f0000000880)='./file0\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r14, 0x54a2) ioctl$TCSETSF(r13, 0x5412, &(0x7f0000000040)) fremovexattr(r5, &(0x7f0000000a80)=@known='trusted.overlay.nlink\x00') [ 970.878862][T19818] loop3: p1 start 18 is beyond EOD, truncated [ 970.897724][T19818] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 970.909548][T19818] loop3: p3 start 225 is beyond EOD, truncated [ 970.915993][T19818] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 970.953026][T19853] loop2: p1 < > p2 p3 < > p4 [ 970.962456][T19853] loop2: partition table partially beyond EOD, truncated [ 970.975626][T19853] loop2: p1 start 77 is beyond EOD, truncated [ 970.994708][T19853] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:00 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 971.003829][T19853] loop2: p3 start 225 is beyond EOD, truncated [ 971.047643][T19853] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 971.064342][T19891] loop5: p1 p2 p3 < > p4 [ 971.104999][T19891] loop5: p1 size 218105855 extends beyond EOD, truncated 01:55:01 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000025000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 971.188744][T19891] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:55:01 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004e000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 971.264500][T19891] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 971.341836][T19959] loop1: p1 p2 p3 < > p4 01:55:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x2b1, 0xffffffff, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101}) [ 971.364234][T19959] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 971.403217][T19959] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 971.568315][T20057] loop3: p1 p2 p3 < > p4 [ 971.599703][T20057] loop3: partition table partially beyond EOD, truncated [ 971.638422][T20058] loop2: p1 < > p2 p3 < > p4 [ 971.643533][T20058] loop2: partition table partially beyond EOD, truncated 01:55:01 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000e00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:01 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) [ 971.680933][T20057] loop3: p1 start 37 is beyond EOD, truncated [ 971.696600][T20058] loop2: p1 start 78 is beyond EOD, truncated [ 971.718697][T20057] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:01 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a080000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 971.731566][T20058] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 971.759094][T20057] loop3: p3 start 225 is beyond EOD, truncated [ 971.767884][T20058] loop2: p3 start 225 is beyond EOD, truncated 01:55:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0xf8, 0x7, 0xfffffffffffffffb}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000100)="e6e4ec2f5e2358ded90f320c1e53bcb6eb37c559d5", &(0x7f00000001c0)="8c0a93a7e523cdb52961b404c2b89bfe37c8d969a62b11b77001efc62283a9fde3222848366fb3568cad866dd260eecde28282d78cafa22a81fcae20e0e5ace5bd5d128ccc79f2fddbe472199891a4117a3fd7c012b693385fc44a59909f866436da0e97e747f08d7574650d6ee2599a0e613ef9a7c2bcbad2d8c3dae4ffec7a2e1cefda37f53a123f518f3557548b7b477c83d0c2cba5a55c92948de9b029849e3c58d0b2a8ea", 0x5}, 0x20) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0xffffffffffffffc8, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 971.779403][T20058] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 971.787739][T20057] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:01 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000004f000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 972.065178][T20179] loop5: p1 p2 p3 < > p4 01:55:01 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80002, 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x9}, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) [ 972.089243][T20179] loop5: p1 size 234883071 extends beyond EOD, truncated [ 972.124594][T20179] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 972.125535][T20189] loop1: p1 p2 p3 < > p4 [ 972.158221][T20189] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:02 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 972.200930][T20179] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 972.221530][T20189] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:02 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 972.393625][T20306] loop2: p1 < > p2 p3 < > p4 [ 972.403988][T20306] loop2: partition table partially beyond EOD, truncated [ 972.429425][T20306] loop2: p1 start 79 is beyond EOD, truncated [ 972.435680][T20306] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 972.449619][T20306] loop2: p3 start 225 is beyond EOD, truncated [ 972.455986][T20306] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:02 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a090000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 972.532089][T20417] loop5: p1 p2 p3 < > p4 [ 972.548119][T20417] loop5: p1 size 268437503 extends beyond EOD, truncated [ 972.557423][T20417] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 972.566738][T20417] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 972.575432][T20403] loop3: p1 p2 p3 < > p4 01:55:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 972.580044][T20403] loop3: partition table partially beyond EOD, truncated [ 972.587268][T20403] loop3: p1 start 100 is beyond EOD, truncated [ 972.602072][T20403] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 972.610211][T20403] loop3: p3 start 225 is beyond EOD, truncated [ 972.616545][T20403] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:02 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:55:02 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001100ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:02 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000052000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:02 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000e1000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r1, 0x203, 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00@\x00\x00'], &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x142}}, 0x800, 0xbff}, &(0x7f00000001c0)=0x90) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 972.870251][T20527] loop1: p1 p2 p3 < > p4 [ 972.889776][T20527] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 972.937293][T20527] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xfeff, 0xff, 0x6, 0x3}, {0x400, 0x6c, 0x2}, {0x3ff, 0x1, 0x1b, 0x5}, {0x4be, 0x6, 0x20, 0x7}]}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 973.178248][T20645] loop2: p1 < > p2 p3 < > p4 [ 973.186040][T20645] loop2: partition table partially beyond EOD, truncated [ 973.199388][T20646] loop5: p1 p2 p3 < > p4 [ 973.214471][T20646] loop5: p1 size 285214719 extends beyond EOD, truncated 01:55:03 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 973.236380][T20645] loop2: p1 start 82 is beyond EOD, truncated [ 973.254086][T20651] loop3: p1 p2 p3 < > p4 [ 973.264326][T20646] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 973.272411][T20651] loop3: partition table partially beyond EOD, truncated [ 973.301593][T20645] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 973.327048][T20646] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 973.345518][T20645] loop2: p3 start 225 is beyond EOD, truncated [ 973.387782][T20651] loop3: p1 start 225 is beyond EOD, truncated [ 973.394195][T20645] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 973.408293][T20651] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 973.451349][T20651] loop3: p3 start 225 is beyond EOD, truncated [ 973.488574][T20651] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000100)={0x7f, 0x4, 0xaa4a429, 0x8}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x5b, 0xf71, 0x3}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:55:03 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07001200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 973.607283][T20870] print_req_error: 4025 callbacks suppressed [ 973.607294][T20870] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 973.624854][T20645] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 973.682991][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.694026][ T2504] buffer_io_error: 3992 callbacks suppressed [ 973.694034][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.711709][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.723276][ T2504] Buffer I/O error on dev loop2p4, logical block 0, async page read 01:55:03 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000003010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 973.747046][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.758105][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.766461][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.778708][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read 01:55:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x0, 0x1, 0x22, 0x800, 0x14, 0x14, 0x1, 0x0, 0x8, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) msgsnd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgsnd(r2, &(0x7f0000000240)={0x3, "c9167b41a318c751ad963efdb8437a1ddd1e760abe8798ab88bbef6e2851c954bebe9d86dacae7ba66a768b86a62f71e62d40b542f484a39516d3a369d6680897f8acbac2b8f6ea0af96381b8a"}, 0x55, 0x400) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) recvfrom$rxrpc(r3, &(0x7f0000000100)=""/126, 0x7e, 0x10002, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0xffffffffffffff25, {0xa, 0x4e21, 0xffffe489, @loopback, 0x77a6}}, 0x24) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 973.797676][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.809768][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.821801][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.833230][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read 01:55:03 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x0) [ 973.847307][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.858709][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.867650][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.879389][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.889279][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.900309][ T2505] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 973.913351][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 973.929657][T20821] loop1: p1 p2 p3 < > p4 01:55:03 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000053000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 973.975654][T20821] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 974.021521][T20821] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 974.129194][T20992] loop3: p1 p2 p3 < > p4 [ 974.134033][T20992] loop3: partition table partially beyond EOD, truncated 01:55:04 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0b0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 974.187335][T20992] loop3: p1 start 259 is beyond EOD, truncated [ 974.212943][T20992] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000440)=0x75b, 0x4) r2 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x631}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x442a1046db027f37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44001}, 0x4040) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000200)=0x10000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f00000001c0)={r8, 0x4}) [ 974.231871][T20992] loop3: p3 start 225 is beyond EOD, truncated [ 974.239162][T20992] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 974.254364][T20988] loop5: p1 p2 p3 < > p4 [ 974.279319][T20988] loop5: p1 size 301991935 extends beyond EOD, truncated [ 974.297863][T20988] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 974.325758][T20988] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 974.362199][T21076] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) 01:55:04 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07002500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:04 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000001020000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x8000, 0x3, 0x8001}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000140)) [ 974.579873][T21119] loop1: p1 p2 p3 < > p4 01:55:04 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000055000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 974.601840][T21119] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 974.651906][T21119] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 974.778182][T21228] loop5: p1 p2 p3 < > p4 01:55:04 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 974.814248][T21228] loop5: p1 size 620759039 extends beyond EOD, truncated 01:55:04 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x0) [ 974.933661][T21228] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 974.941824][T21235] loop3: p1 p2 p3 < > p4 [ 974.946626][T21235] loop3: partition table partially beyond EOD, truncated [ 974.960003][T21228] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:55:04 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) msgsnd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x1, 0x0) r1 = msgget(0x3, 0xb4a9c1de1a901c12) msgsnd(r1, &(0x7f00000002c0)={0x3, "4f1567b2c34670eef98dacfed87f0031c6879683777920350fb29e7a3924"}, 0xffffffffffffffc4, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1b6) setresuid(0x0, r4, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, r6]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgid(0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0xfff, r4, r6, r9, r10, 0x2, 0x2}, 0x8, 0x9, 0x80, 0x7fffffff, 0x6, 0x3, r11, r12}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfe}) syz_open_pts(r13, 0x0) ioctl$TCSETA(r13, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) [ 975.005299][T21235] loop3: p1 start 513 is beyond EOD, truncated [ 975.018470][T21235] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 975.032363][T21250] loop2: p1 < > p2 p3 < > p4 [ 975.037500][T21250] loop2: partition table partially beyond EOD, truncated [ 975.046044][T21235] loop3: p3 start 225 is beyond EOD, truncated [ 975.053019][T21250] loop2: p1 start 85 is beyond EOD, truncated [ 975.059532][T21235] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 975.066896][T21250] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:04 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004800ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 975.111515][T21250] loop2: p3 start 225 is beyond EOD, truncated [ 975.127392][T21353] loop1: p1 p2 p3 < > p4 [ 975.134785][T21250] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 975.152808][T21353] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x29b5}, @mss={0x2, 0x5be5b7f4}], 0x2) r8 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f00000000c0)="fffa97528615f84ee64d61f22426805c49f4c7de4a5f87d1e841defabb6484c4d1fb72e8c9ed6c88a7c704b5bc0c12c7e911f41e1ac859458cc57ca1c07bd8") ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) write$UHID_DESTROY(r8, &(0x7f0000000100), 0x4) accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000200)={0x1, 0xffffffff, 0x8, 0x1000}) [ 975.169431][T21353] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:05 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0d0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:05 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000099030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:05 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000056000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3f, 0x109000) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[{0x6, 0x9, 0x7, 0x3}, {0x5, 0x2, 0x6f, 0x4}, {0x2, 0x6, 0x3, 0x10000}, {0x4f83, 0x68, 0x7f, 0x3ff}, {0x9, 0x9f, 0x9, 0x8}, {0x9, 0x2, 0x7, 0x8}, {0x1, 0x0, 0x2, 0x80}, {0xfffb, 0x21, 0xa1, 0x2}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 975.529321][T21467] loop5: p1 p2 p3 < > p4 [ 975.533912][T21467] loop5: p1 size 1207961599 extends beyond EOD, truncated [ 975.556820][T21547] loop3: p1 p2 p3 < > p4 [ 975.567735][T21547] loop3: partition table partially beyond EOD, truncated [ 975.589045][T21547] loop3: p1 start 921 is beyond EOD, truncated [ 975.612443][T21467] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 975.617683][T21547] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 975.629114][T21547] loop3: p3 start 225 is beyond EOD, truncated [ 975.642920][T21467] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 975.645433][T21547] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 975.672762][T21584] loop1: p1 p2 p3 < > p4 01:55:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYBLOB="040000f5b00c86d035cbd7bb77324100"], &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0xfffb, 0x8000, 0x800, 0x8, r7}, &(0x7f0000000200)=0x10) r8 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r8, &(0x7f0000000100)='./file0\x00', 0xc00) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 975.693948][T21584] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 975.732499][T21584] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 975.800100][T21580] loop2: p1 < > p2 p3 < > p4 [ 975.817421][T21580] loop2: partition table partially beyond EOD, truncated [ 975.835379][T21580] loop2: p1 start 86 is beyond EOD, truncated [ 975.842021][T21580] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 975.881567][T21580] loop2: p3 start 225 is beyond EOD, truncated 01:55:05 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x0) [ 975.935852][T21580] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:05 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0e0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:05 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000009b030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:05 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:06 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000061000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:06 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80200, 0x0) io_uring_enter(r0, 0x0, 0x6, 0x6, &(0x7f0000000140)={0x5}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000001c0)={0x0, 0x3, 0x6}) r7 = fcntl$dupfd(r3, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000000240)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup(r7) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r11 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) r12 = syz_open_pts(r11, 0x350659d5ed9c62d5) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r12, 0x5412, &(0x7f0000000040)) [ 976.309103][T21774] loop1: p1 p2 p3 < > p4 [ 976.332850][T21774] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 976.373800][T21774] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 976.386577][T21820] loop3: p1 p2 p3 < > p4 [ 976.394335][T21820] loop3: partition table partially beyond EOD, truncated [ 976.404390][T21820] loop3: p1 start 923 is beyond EOD, truncated [ 976.416853][T21820] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000000c0)="8d722dcbd84e7a4e0bfae19e9cc46fed1a647dc6886a800aabcc8e65fa5072a60728f85601a9acd9c4755621d688811f87b37f67239d1336c0a28bd3e9ea0540343e897bc709f4111408fb7f161b8d4fef998b8936b1d39d164ae6bab56dd0d3cefa2dae5274cdd6797361722d2fd413fabb49490e9f88cddc303e7b52b70552ea90752f0429c3b35aa8f0fe536c7edbef1a38ae125f852b4ba723a452de1687239c81630e34c9df13295e8fb5e5399e04c52d025b97b5a42acaaee5a42f") [ 976.431378][T21820] loop3: p3 start 225 is beyond EOD, truncated [ 976.437969][T21820] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 976.448853][T21822] loop5: p1 p2 p3 < > p4 [ 976.454897][T21822] loop5: p1 size 1275070463 extends beyond EOD, truncated [ 976.538741][T21826] loop2: p1 < > p2 p3 < > p4 [ 976.553565][T21826] loop2: partition table partially beyond EOD, truncated [ 976.575254][T21826] loop2: p1 start 97 is beyond EOD, truncated [ 976.583882][T21826] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 976.611088][T21826] loop2: p3 start 225 is beyond EOD, truncated [ 976.617802][T21822] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 976.622950][T21826] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:06 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a100000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 976.658934][T21822] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:55:06 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000c8070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) 01:55:06 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07005500ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:06 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000062000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 976.869072][T21952] loop1: p1 p2 p3 < > p4 [ 976.889097][T21952] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 976.950412][T21952] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 977.028195][T21962] loop3: p1 p2 p3 < > p4 [ 977.036425][T21962] loop3: partition table partially beyond EOD, truncated 01:55:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBLED(r3, 0x4b65, 0x6) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 977.070713][T21962] loop3: p1 start 1992 is beyond EOD, truncated [ 977.078693][T21970] loop5: p1 p2 p3 < > p4 [ 977.097961][T21970] loop5: p1 size 1426065407 extends beyond EOD, truncated [ 977.107285][T21962] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 977.127266][T21970] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 977.147044][T21962] loop3: p3 start 225 is beyond EOD, truncated [ 977.155669][T21970] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 977.164973][T21962] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:07 executing program 0: syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1d, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x0, @perf_bp={0x0}, 0x800, 0x1ff}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x1, 0x0) splice(r4, &(0x7f0000000600)=0x8, r5, &(0x7f0000000640), 0x9, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x4000}, 0x8) r6 = syz_open_procfs(0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) sendto$inet6(r2, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0xa) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.advise\x00') accept4(r7, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="0bd54b4f7f78e2dddd5209f86b20c56cb06070397f3a75626ce4dae6977aeb63765d55831b31c1a9b513c0c86eb83fc53e64340b5418051a405b3692ceed0fb707007c33eff7308febf7e4576ff97bd3656388e3addaf264e28ab68a8357f2ed8ecd179b75c1f9be249b18397f9bf3933326ae0f7bfd6f07f841df51afd8f262a74a6bedef796be7cb458fc9dedd04bbf177a4738c3751b18a92459f2bd8860b1b593fdde09d3b", 0xa7, 0x0, 0x0, 0x0) [ 977.235736][T22001] loop2: p1 < > p2 p3 < > p4 [ 977.263553][T22001] loop2: partition table partially beyond EOD, truncated 01:55:07 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a110000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 977.322944][T22001] loop2: p1 start 98 is beyond EOD, truncated [ 977.342716][T21970] __loop_clr_fd: partition scan of loop5 failed (rc=-16) 01:55:07 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07005c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 977.400485][T22001] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:07 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000cd070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 977.461584][T22001] loop2: p3 start 225 is beyond EOD, truncated [ 977.524152][T22001] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:07 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000064000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 977.708814][T22174] loop1: p1 p2 p3 < > p4 [ 977.722819][T22174] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 977.765818][T22174] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 977.777690][T22202] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 977.838300][T22208] loop3: p1 p2 p3 < > p4 [ 977.842677][T22208] loop3: partition table partially beyond EOD, truncated 01:55:07 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 977.887377][T22208] loop3: p1 start 1997 is beyond EOD, truncated [ 977.898193][T22219] loop2: p1 < > p2 p3 < > p4 [ 977.903071][T22219] loop2: partition table partially beyond EOD, truncated [ 977.927903][T22219] loop2: p1 start 100 is beyond EOD, truncated [ 977.934514][T22208] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 977.965218][T22208] loop3: p3 start 225 is beyond EOD, truncated 01:55:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0x4) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") syz_genetlink_get_family_id$tipc2(0x0) [ 977.975224][T22219] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:07 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a120000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 978.017685][T22208] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x82c00011}, 0xc, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedb00000500000018000400020000000000000004000000ffffff7f040000001e0002000004000014001400fe8000000000ea0500000000000000aa080002ebffffff00df245d453346289819799ad0f4cd188d4764b6b3325af12a511563f01f48f3e748b14ac2a4bc9a281873e21893a726f6bdf0330f9747e331333cda340cbe63efda61d5a1e1b3580e8e666b604237cd8203b30dbbc71d7ada6e0afd06b6f8844acf9623a584946fc96f97"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x5000) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000380)=0x4) r8 = syz_open_pts(r6, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) recvmmsg(r10, &(0x7f0000002ac0)=[{{&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/185, 0xb9}], 0x1, &(0x7f0000000580)=""/11, 0xb}, 0x5}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/20, 0x14}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x6000000}, {{&(0x7f0000002700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002780)=""/215, 0xd7}, {&(0x7f0000002880)=""/96, 0x60}, {&(0x7f0000002900)=""/3, 0x3}, {&(0x7f0000002940)=""/31, 0x1f}], 0x4, &(0x7f00000029c0)=""/225, 0xe1}, 0x3c5}], 0x3, 0x1a34664514351650, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000002b80)={r12}) ioctl$TCSETSF(r8, 0x5412, &(0x7f0000000040)) [ 978.077333][T22219] loop2: p3 start 225 is beyond EOD, truncated [ 978.102094][T22219] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 978.199045][T22223] loop5: p1 p2 p3 < > p4 [ 978.214919][T22223] loop5: p1 size 1610614783 extends beyond EOD, truncated [ 978.238611][T22219] __loop_clr_fd: partition scan of loop2 failed (rc=-16) 01:55:08 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000d1380000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:08 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x2300080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8040a00}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x4001}, 0x4004011) setns(r1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) creat(&(0x7f0000001c00)='./bus\x00', 0x0) socket(0x0, 0x803, 0xff) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) [ 978.298485][T22223] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:55:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x12420, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r2 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000140)={0x8b, 0x9, 0x7, 0x1, 0xf, 0x1, 0x1, 0x76, 0x8e42, 0x2, 0xb, 0x4}) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000000c0)=""/51) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 01:55:08 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000066000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 978.366838][T22223] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 978.416738][T22239] loop1: p1 p2 p3 < > p4 [ 978.437047][T22239] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 978.477108][T22239] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:08 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x2300080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8040a00}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x4001}, 0x4004011) setns(r1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) creat(&(0x7f0000001c00)='./bus\x00', 0x0) socket(0x0, 0x803, 0xff) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) 01:55:08 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006800ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 978.609785][T22346] loop3: p1 p2 p3 < > p4 [ 978.616486][T22346] loop3: partition table partially beyond EOD, truncated [ 978.629463][T22346] loop3: p1 start 14545 is beyond EOD, truncated [ 978.639223][T22346] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 978.647632][T22346] loop3: p3 start 225 is beyond EOD, truncated [ 978.653901][T22346] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:08 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x2300080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8040a00}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x4001}, 0x4004011) setns(r1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) creat(&(0x7f0000001c00)='./bus\x00', 0x0) socket(0x0, 0x803, 0xff) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) [ 978.779205][T22368] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) 01:55:08 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a1c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:08 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000d5380000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:08 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000067000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r2, 0x5501) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20020000) [ 979.071937][T22473] loop5: p1 p2 p3 < > p4 [ 979.082943][T22473] loop5: p1 size 1744832511 extends beyond EOD, truncated [ 979.102310][T22473] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:55:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f00000001c0)={0xfd, 0x1ff, 0x73d, 0x8, 0x8, 0x40, 0x40, 0x6e, 0x81, 0x3f, 0x2, 0x0, 0x8, 0x80, &(0x7f00000000c0)=""/110, 0x92, 0x3, 0x30000}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0x10000, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, 0x0) getsockname$packet(r10, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r11, 0x0) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r13 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r14 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r13, r14, &(0x7f0000000240)=0x202, 0x4000000000dc) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r14, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r15, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r15, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r16, 0x40086602, 0x400007) fsetxattr(r16, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r15, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r16}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, r15, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10a000021}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r15, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc0f93d9}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 979.122633][T22483] loop1: p1 p2 p3 < > p4 [ 979.162405][T22483] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 979.182797][T22473] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 979.194033][T22483] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 979.241663][T22492] loop3: p1 p2 p3 < > p4 [ 979.246237][T22492] loop3: partition table partially beyond EOD, truncated 01:55:09 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a250000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 979.282915][T22492] loop3: p1 start 14549 is beyond EOD, truncated 01:55:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}) 01:55:09 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006c00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 979.333627][T22492] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 979.392786][T22492] loop3: p3 start 225 is beyond EOD, truncated [ 979.458451][T22511] loop2: p1 < > p2 p3 < > p4 [ 979.467640][T22511] loop2: partition table partially beyond EOD, truncated [ 979.485046][T22492] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 979.513590][T22511] loop2: p1 start 103 is beyond EOD, truncated [ 979.543370][T22511] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 979.598968][T22511] loop2: p3 start 225 is beyond EOD, truncated [ 979.614945][T22511] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 979.728822][T22624] loop1: p1 p2 p3 < > p4 [ 979.748268][T22624] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:09 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000375e0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/^Pv/\xf0\x81\x00x\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 979.792135][T22624] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 979.852764][T22633] loop5: p1 p2 p3 < > p4 01:55:09 executing program 0: r0 = socket(0x42000000015, 0x805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r0) [ 979.892584][T22633] loop5: p1 size 1811941375 extends beyond EOD, truncated 01:55:09 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000068000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:09 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a480000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 979.953241][T22633] loop5: p2 size 1073741824 extends beyond EOD, truncated 01:55:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x1, @local}}, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r3, &(0x7f00000000c0)=""/58, 0x3a, 0x2, 0x0) r4 = syz_open_pts(r0, 0x8000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) [ 980.020234][T22633] loop5: p4 size 3657465856 extends beyond EOD, truncated 01:55:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x20000) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r3, 0x0) [ 980.088098][T22761] loop3: p1 p2 p3 < > p4 [ 980.108291][T22761] loop3: partition table partially beyond EOD, truncated [ 980.132680][T22761] loop3: p1 start 24119 is beyond EOD, truncated [ 980.151151][T22761] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:10 executing program 0: syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1d, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x1ff, 0x0, 0x4}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000600)=0x8, r3, &(0x7f0000000640), 0x9, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x0, 0x100, 0x3}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r4, 0x4000}, 0x8) r5 = syz_open_procfs(0x0, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0xa) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.advise\x00') accept4(r6, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="0bd54b4f7f78e2dddd5209f86b20c56cb06070397f3a75626ce4dae6977aeb63765d55831b31c1a9b513c0c86eb83fc53e64340b5418051a405b3692ceed0fb707007c33eff7308febf7e4576ff97bd3656388e3addaf264e28ab68a8357f2ed8ecd179b75c1f9be249b18397f9bf3933326ae0f7bfd6f07f841df51afd8f262a74a6bedef796be7cb458fc9dedd04bbf177a4738c3751b18a92459f2bd8860b1b593fdde09d3b", 0xa7, 0x0, 0x0, 0x0) [ 980.163795][T22761] loop3: p3 start 225 is beyond EOD, truncated [ 980.188385][T22761] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) [ 980.328003][T22862] loop1: p1 p2 p3 < > p4 01:55:10 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07007400ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 980.362508][T22862] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 980.383787][T22859] loop2: p1 < > p2 p3 < > p4 [ 980.400320][T22859] loop2: partition table partially beyond EOD, truncated [ 980.427855][T22859] loop2: p1 start 104 is beyond EOD, truncated [ 980.434052][T22859] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 980.462892][T22862] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:10 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000092770000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 980.539012][T22859] loop2: p3 start 225 is beyond EOD, truncated [ 980.551569][T22859] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r3, 0x5412, &(0x7f00000000c0)={0x80, 0x4, 0x0, 0xffffffff, 0x12, 0x0, 0x0, 0x0, 0xc4}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x3, 0xc3, 0x6, 0x9, 0x1a, 0xfa, 0x1, 0x3, 0x81, 0xb28, 0x2, 0x9}) write$binfmt_aout(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x4ae) 01:55:10 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a4c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 980.755346][T23006] loop5: p1 p2 p3 < > p4 [ 980.767060][T23006] loop5: p1 size 1946159103 extends beyond EOD, truncated 01:55:10 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000069000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 980.815018][T23006] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 980.859661][T23006] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 980.913922][T23099] loop3: p1 p2 p3 < > p4 [ 980.937687][T23099] loop3: partition table partially beyond EOD, truncated [ 980.997992][T23099] loop3: p1 start 30610 is beyond EOD, truncated 01:55:10 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07007a00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 981.065316][T23099] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 981.098161][T23211] loop2: p1 < > p2 p3 < > p4 [ 981.112123][T23211] loop2: partition table partially beyond EOD, truncated [ 981.120879][T23099] loop3: p3 start 225 is beyond EOD, truncated [ 981.131463][T23099] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 981.149576][T23211] loop2: p1 start 105 is beyond EOD, truncated [ 981.161263][T23215] loop1: p1 p2 p3 < > p4 [ 981.190296][T23215] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 981.197557][T23211] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 981.222882][T23215] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 981.232715][T23211] loop2: p3 start 225 is beyond EOD, truncated 01:55:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x8, 0x0, 0xfffd, 0x8}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000dc0)={0x1, 0x2, 0x1000, 0x9e, &(0x7f0000000d00)="fc57e9210cf4c99928a8de85a41279f4080539672bf87e905a83ea3108b8d7e09d6daeae1826250d69adbc284e078f74befb87ee791dc88698e5eda7cd4f83073753004cef8c4b6b06141161dcf6b7ac5aeeff5bf613191a9dce221f63409a0f3111920d602b17d2f5d32488746c8dc2967896bd5da4d03d2b8700dd423f659515732cf66a3541935fd3d721d473c3a13e7035ff2eb5cf6fd7b41c51211a", 0x0, 0x0, &(0x7f0000000100)}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_aout(r5, &(0x7f00000001c0)={{0x108, 0x7f, 0x0, 0x3e3, 0x4e, 0x7, 0x1f, 0x10001}, "8c726835aa243425b293b9718754723fe6917c63e2afcb9af5bbf19e90bc645fead48513163c034ff62f945f6169585f5876c4845ac0a094f444cfbb77b69af8389f68a149faeeb459acc340395dedbed0cd5e530cc73c8d4e19a0b80aec91af0824ac3fc5461c6fd247f7f7a3a35071dc6fb816c91a99bcb67f984120264529115198fe9d029b3f4c20c556868188ba87df18bfce73dcbc6f3bab0e9253d3fdd61e9b801c562a572bc2b8ce22e3a5124398d1f12c046d20a40d5436247c3ed548c953aba70658db21628916c9940dc15c2ab99c9942840b62dc5ec1e2036416ba67d796df146a512c8f2376e9509a47611c57e1bf699a0f90", [[], [], [], [], [], [], [], [], [], []]}, 0xb19) 01:55:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) [ 981.252606][T23211] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 981.389309][T23225] print_req_error: 813 callbacks suppressed [ 981.389317][T23225] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 981.409316][T23099] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 981.422530][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.433547][ T2505] buffer_io_error: 802 callbacks suppressed [ 981.433556][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.447821][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.459091][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.467406][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.478596][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read 01:55:11 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 981.492354][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.503328][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.511997][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.522963][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.531481][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.542468][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.550939][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.561903][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.570171][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.581091][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read 01:55:11 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000e60f0d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 981.609325][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 981.620742][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.629531][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 981.651345][T23331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:55:11 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000006d000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:11 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a550000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 981.724822][T23224] loop5: p1 p2 p3 < > p4 [ 981.734065][T23224] loop5: p1 size 2046822399 extends beyond EOD, truncated [ 981.760861][T23331] net_ratelimit: 2 callbacks suppressed [ 981.760907][T23331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:11 executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x10000, 0x6}, {0xffffffff00000000}]}, 0x14, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='w\x85an1\x00', &(0x7f00000002c0)='proc\x00']) [ 981.823462][T23224] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 981.874494][T23224] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 981.900999][T23412] loop3: p1 p2 p3 < > p4 [ 981.924304][T23412] loop3: partition table partially beyond EOD, truncated [ 981.943890][T23412] loop3: p1 start 856038 is beyond EOD, truncated [ 981.955405][T23224] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 981.969130][T23412] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 981.989722][T23412] loop3: p3 start 225 is beyond EOD, truncated [ 982.003220][T23448] loop1: p1 p2 p3 < > p4 [ 982.005026][T23412] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 982.063890][T23448] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 982.076151][T23445] loop2: p1 < > p2 p3 < > p4 01:55:11 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07009000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 982.104566][T23445] loop2: partition table partially beyond EOD, truncated [ 982.136960][T23448] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 982.155638][T23445] loop2: p1 start 109 is beyond EOD, truncated 01:55:12 executing program 4: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000007c5000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 982.262144][T23445] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 982.300672][T23445] loop2: p3 start 225 is beyond EOD, truncated 01:55:12 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000ef5a0d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:12 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a5c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 982.415195][T23445] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 982.497625][T23568] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 982.607705][T23575] loop4: p1 < > p2 p3 < > p4 01:55:12 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700d000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 982.637803][T23575] loop4: partition table partially beyond EOD, truncated [ 982.665373][T23580] loop3: p1 p2 p3 < > p4 [ 982.670695][T23575] loop4: p1 start 197 is beyond EOD, truncated [ 982.676989][T23580] loop3: partition table partially beyond EOD, truncated 01:55:12 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000072000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 982.695243][T23575] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 982.712481][T23575] loop4: p3 start 225 is beyond EOD, truncated [ 982.723541][T23575] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 982.743113][T23587] loop1: p1 p2 p3 < > p4 [ 982.762998][T23587] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 982.780750][T23580] loop3: p1 start 875247 is beyond EOD, truncated [ 982.818356][T23587] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 982.827550][T23580] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 982.840650][T23580] loop3: p3 start 225 is beyond EOD, truncated [ 982.864954][T23580] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 983.044144][T23596] loop2: p1 < > p2 p3 < > p4 01:55:12 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000aa6c0e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 983.070519][T23596] loop2: partition table partially beyond EOD, truncated [ 983.137965][T23596] loop2: p1 start 114 is beyond EOD, truncated [ 983.144177][T23596] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 983.213875][T23596] loop2: p3 start 225 is beyond EOD, truncated [ 983.250626][T23596] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 983.279500][T23593] loop5: p1 p2 p3 < > p4 [ 983.286837][T23593] loop5: p1 size 3489662975 extends beyond EOD, truncated [ 983.300611][T23609] loop3: p1 p2 p3 < > p4 [ 983.308131][T23609] loop3: partition table partially beyond EOD, truncated [ 983.322130][T23609] loop3: p1 start 945322 is beyond EOD, truncated [ 983.332509][T23593] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 983.357078][T23609] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 983.390577][T23593] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 983.404677][T23609] loop3: p3 start 225 is beyond EOD, truncated [ 983.442046][T23609] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 983.577768][T23593] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 986.505579][T23787] print_req_error: 8842 callbacks suppressed [ 986.505592][T23787] blk_update_request: I/O error, dev loop5, sector 225 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 986.532114][T23788] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 986.559746][T23789] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 986.565850][T23791] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 986.577841][ T2505] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.594781][ T2505] buffer_io_error: 8755 callbacks suppressed [ 986.594789][ T2505] Buffer I/O error on dev loop5p4, logical block 51488, async page read [ 986.609639][ T2505] blk_update_request: I/O error, dev loop5, sector 205956 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.620994][ T2505] Buffer I/O error on dev loop5p4, logical block 51489, async page read [ 986.629769][T23788] blk_update_request: I/O error, dev loop5, sector 206160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 986.641848][ T2505] blk_update_request: I/O error, dev loop5, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.653185][ T2505] Buffer I/O error on dev loop5p2, logical block 51488, async page read [ 986.661908][ T2505] blk_update_request: I/O error, dev loop5, sector 205962 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.673258][ T2505] Buffer I/O error on dev loop5p1, logical block 102976, async page read [ 986.681981][ T2505] blk_update_request: I/O error, dev loop5, sector 205964 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.693325][ T2505] Buffer I/O error on dev loop5p1, logical block 102977, async page read [ 986.702050][ T2505] Buffer I/O error on dev loop5p1, logical block 102978, async page read [ 986.710553][ T2505] Buffer I/O error on dev loop5p1, logical block 102979, async page read [ 986.719259][ T2505] Buffer I/O error on dev loop5p4, logical block 51540, async page read [ 986.721452][T23791] Buffer I/O error on dev loop5p4, logical block 51541, async page read [ 986.727644][ T2505] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 987.716595][T23331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 987.724702][T23331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.732190][T23331] 8021q: adding VLAN 0 to HW filter on device team0 01:55:17 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:17 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a600000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:17 executing program 4: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000200000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:17 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000073000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:17 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000a3f90e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:17 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700d200ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 987.777853][T23331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 987.949427][T23819] loop1: p1 p2 p3 < > p4 [ 987.961773][T23819] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 987.985778][T23819] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:17 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 988.088965][T23818] loop4: p1 p2 p3 < > p4 [ 988.093685][T23818] loop4: partition table partially beyond EOD, truncated [ 988.103061][T23818] loop4: p1 size 2047 extends beyond EOD, truncated [ 988.112131][T23818] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 988.122273][T23818] loop4: p3 start 225 is beyond EOD, truncated [ 988.132291][T23820] loop2: p1 < > p2 p3 < > p4 01:55:18 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a680000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 988.137232][T23822] loop3: p1 p2 p3 < > p4 [ 988.154769][T23822] loop3: partition table partially beyond EOD, truncated [ 988.163914][T23820] loop2: partition table partially beyond EOD, truncated [ 988.168639][T23818] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 988.183476][T23822] loop3: p1 start 981411 is beyond EOD, truncated [ 988.185452][T23821] loop5: p1 p2 p3 < > p4 [ 988.195091][T23821] loop5: p1 size 3523217407 extends beyond EOD, truncated [ 988.195210][T23820] loop2: p1 start 115 is beyond EOD, truncated [ 988.213053][T23822] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 988.227307][T23822] loop3: p3 start 225 is beyond EOD, truncated [ 988.235646][T23821] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 988.251560][T23821] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 988.253517][T23820] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 988.272652][T23822] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 988.281154][T23820] loop2: p3 start 225 is beyond EOD, truncated 01:55:18 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 988.390582][T23820] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 01:55:18 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700ee00ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:18 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000074000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 988.640060][T23845] loop1: p1 p2 p3 < > p4 [ 988.651318][T23845] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 988.669339][T23845] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:18 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r1, r0, 0x0) 01:55:18 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020163000000ffe0f505ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:18 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a6c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:18 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 989.048406][T23878] loop2: p1 < > p2 p3 < > p4 [ 989.056625][T23878] loop2: partition table partially beyond EOD, truncated [ 989.080645][T23878] loop2: p1 start 116 is beyond EOD, truncated [ 989.092654][T23878] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 989.105028][T23878] loop2: p3 start 225 is beyond EOD, truncated [ 989.111843][T23878] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 989.121373][T23879] loop5: p1 p2 p3 < > p4 [ 989.126175][T23879] loop5: p1 size 3992979455 extends beyond EOD, truncated 01:55:19 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) [ 989.148736][T23879] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 989.168302][T23879] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 989.248807][T23882] loop3: p1 p2 p3 < > p4 [ 989.254108][T23887] loop1: p1 p2 p3 < > p4 [ 989.262501][T23882] loop3: partition table partially beyond EOD, truncated [ 989.270976][T23882] loop3: p1 start 99999999 is beyond EOD, truncated [ 989.278200][T23882] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 989.286444][T23882] loop3: p3 start 225 is beyond EOD, truncated [ 989.293357][T23882] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000402ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 989.347828][T23887] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 989.371841][T23887] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:19 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000078000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:19 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) close(r0) 01:55:19 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02016300000000000040ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 989.568118][T23887] __loop_clr_fd: partition scan of loop1 failed (rc=-16) 01:55:19 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a740000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:19 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) close(r0) 01:55:19 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r1, r0, 0x0) [ 989.858101][T23928] loop2: p1 < > p2 p3 < > p4 [ 989.887265][T23928] loop2: partition table partially beyond EOD, truncated [ 989.918886][T23928] loop2: p1 start 120 is beyond EOD, truncated 01:55:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07004002ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:19 executing program 4: close(0xffffffffffffffff) [ 989.955085][T23928] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 989.971907][T23932] loop3: p1 p2 p3 < > p4 [ 989.984952][T23932] loop3: partition table partially beyond EOD, truncated [ 989.998566][T23932] loop3: p1 start 1073741824 is beyond EOD, truncated [ 990.024972][T23928] loop2: p3 start 225 is beyond EOD, truncated [ 990.038237][T23932] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 990.060530][T23928] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 990.068871][T23932] loop3: p3 start 225 is beyond EOD, truncated 01:55:19 executing program 4: close(0xffffffffffffffff) [ 990.089253][T23932] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 990.127625][T23942] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) 01:55:20 executing program 4: close(0xffffffffffffffff) 01:55:20 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a7a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:20 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a020000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:20 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000003010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:20 executing program 4: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) close(r0) 01:55:20 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07006002ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:20 executing program 4: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) close(r0) [ 990.669271][T23981] loop1: p1 p2 p3 < > p4 [ 990.685871][T23981] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 990.708828][T23984] loop2: p1 < > p2 p3 < > p4 01:55:20 executing program 4: r0 = syz_open_dev$midi(0x0, 0x638, 0x8085) close(r0) [ 990.716955][T23984] loop2: partition table partially beyond EOD, truncated [ 990.726706][T23981] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 990.734366][T23984] loop2: p1 start 259 is beyond EOD, truncated [ 990.743572][T23984] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 990.763664][T23984] loop2: p3 start 225 is beyond EOD, truncated [ 990.772162][T23984] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 990.812018][T23986] loop3: p1 p2 p3 < > p4 [ 990.816486][T23986] loop3: partition table partially beyond EOD, truncated 01:55:20 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r1, r0, 0x0) 01:55:20 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) close(r0) [ 990.849155][T23986] loop3: p1 start 522 is beyond EOD, truncated [ 990.862523][T23986] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 990.873838][T23986] loop3: p3 start 225 is beyond EOD, truncated [ 990.884439][T23986] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:20 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) close(r0) 01:55:20 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000000ed010000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:20 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a900000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:21 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07008002ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:21 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:21 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8085) close(r0) [ 991.358866][T24030] loop1: p1 p2 p3 < > p4 [ 991.371586][T24030] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 991.394622][T24030] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:21 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) close(r0) [ 991.491766][T24033] loop2: p1 < > p2 p3 < > p4 [ 991.518807][T24033] loop2: partition table partially beyond EOD, truncated [ 991.534516][T24033] loop2: p1 start 493 is beyond EOD, truncated 01:55:21 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700b002ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:21 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000ad40000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 991.548453][T24043] loop3: p1 p2 p3 < > p4 [ 991.552962][T24043] loop3: partition table partially beyond EOD, truncated [ 991.561839][T24033] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 991.574389][T24033] loop2: p3 start 225 is beyond EOD, truncated [ 991.581101][T24043] loop3: p1 start 778 is beyond EOD, truncated 01:55:21 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) close(r0) [ 991.595032][T24033] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 991.603068][T24043] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 991.611401][T24043] loop3: p3 start 225 is beyond EOD, truncated [ 991.648979][T24043] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:21 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) tkill(r0, 0x401004000000016) 01:55:21 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x0) close(r0) [ 991.956190][T24058] loop1: p1 p2 p3 < > p4 [ 991.969884][T24058] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:21 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 992.005479][T24058] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:21 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000099030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:21 executing program 4: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) close(0xffffffffffffffff) 01:55:21 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000003ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:22 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000ad80000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:22 executing program 4: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) close(0xffffffffffffffff) [ 992.317335][T24086] loop3: p1 p2 p3 < > p4 [ 992.326437][T24086] loop3: partition table partially beyond EOD, truncated [ 992.336254][T24086] loop3: p1 start 1034 is beyond EOD, truncated [ 992.345214][T24086] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 992.361113][T24086] loop3: p3 start 225 is beyond EOD, truncated [ 992.367384][T24086] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 992.432309][T24099] loop2: p1 < > p2 p3 < > p4 [ 992.484019][T24099] loop2: partition table partially beyond EOD, truncated 01:55:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07002c03ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 992.528397][T24099] loop2: p1 start 921 is beyond EOD, truncated [ 992.536356][T24099] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 992.556933][T24099] loop2: p3 start 225 is beyond EOD, truncated 01:55:22 executing program 4: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) close(0xffffffffffffffff) [ 992.596978][T24099] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:22 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a050000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:22 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000ade0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:22 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) tkill(r0, 0x401004000000016) 01:55:22 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:22 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000009b030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 992.962105][T24240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 992.974321][T24232] loop3: p1 p2 p3 < > p4 [ 992.979146][T24232] loop3: partition table partially beyond EOD, truncated [ 992.990199][T24232] loop3: p1 start 1290 is beyond EOD, truncated 01:55:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07002e03ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 993.050900][T24232] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 993.051709][T24240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.074313][T24240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.088214][T24232] loop3: p3 start 225 is beyond EOD, truncated [ 993.098012][T24232] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 993.123980][T24230] loop1: p1 p2 p3 < > p4 [ 993.157027][T24230] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 993.198256][T24296] loop2: p1 < > p2 p3 < > p4 [ 993.206772][T24296] loop2: partition table partially beyond EOD, truncated [ 993.236118][T24296] loop2: p1 start 923 is beyond EOD, truncated [ 993.256095][T24232] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 993.263985][T24350] print_req_error: 3806 callbacks suppressed [ 993.263998][T24350] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 993.289844][T24230] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 993.297366][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.308701][ T2504] buffer_io_error: 3771 callbacks suppressed [ 993.308709][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.323738][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.335428][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.343778][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.354756][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.363091][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.370340][T24296] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 993.374035][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.391837][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:55:23 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a060000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 993.403495][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.411724][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.422662][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.431579][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.446546][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.455271][T24296] loop2: p3 start 225 is beyond EOD, truncated [ 993.463942][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.475327][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.484680][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.495668][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.507675][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 993.514356][T24296] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:23 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:23 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07003c03ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 993.710607][T24360] loop3: p1 p2 p3 < > p4 [ 993.728709][T24360] loop3: partition table partially beyond EOD, truncated 01:55:23 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000000c5070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 993.755182][T24360] loop3: p1 start 1546 is beyond EOD, truncated [ 993.771101][T24360] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 993.779612][T24360] loop3: p3 start 225 is beyond EOD, truncated [ 993.785960][T24360] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 993.796548][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:55:23 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a030200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:23 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) tkill(r0, 0x401004000000016) [ 993.917070][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.936668][T24360] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 993.944566][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:55:23 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 994.067545][T24580] loop2: p1 < > p2 p3 < > p4 [ 994.079919][T24580] loop2: partition table partially beyond EOD, truncated [ 994.146085][T24580] loop2: p1 start 1989 is beyond EOD, truncated [ 994.154475][T24586] loop1: p1 p2 p3 < > p4 [ 994.165211][T24586] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 994.167765][T24580] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 994.181674][T24586] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:24 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700b203ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 994.209501][T24580] loop2: p3 start 225 is beyond EOD, truncated [ 994.243362][T24580] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:24 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 994.329867][T24598] loop3: p1 p2 p3 < > p4 [ 994.340127][T24598] loop3: partition table partially beyond EOD, truncated [ 994.353321][T24598] loop3: p1 start 1802 is beyond EOD, truncated [ 994.360266][T24598] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 994.368597][T24598] loop3: p3 start 225 is beyond EOD, truncated [ 994.375274][T24598] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:24 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:24 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000000cd070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:24 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a080000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:24 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000204ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 994.664388][T24608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 994.759407][T24608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.833574][T24708] loop2: p1 < > p2 p3 < > p4 [ 994.843623][T24708] loop2: partition table partially beyond EOD, truncated [ 994.848986][T24608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.865077][T24708] loop2: p1 start 1997 is beyond EOD, truncated [ 994.878024][T24708] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 994.899611][T24722] loop1: p1 p2 p3 < > p4 [ 994.908984][T24708] loop2: p3 start 225 is beyond EOD, truncated 01:55:24 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 994.934238][T24722] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 994.947423][T24708] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 994.977150][T24722] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 995.006565][T24724] loop3: p1 p2 p3 < > p4 [ 995.013367][T24724] loop3: partition table partially beyond EOD, truncated 01:55:24 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000604ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:24 executing program 4: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630064ad0a000000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 995.062923][T24724] loop3: p1 start 2058 is beyond EOD, truncated [ 995.100074][T24724] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 995.122079][T24724] loop3: p3 start 225 is beyond EOD, truncated [ 995.128665][T24724] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:25 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000afe0200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:25 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000059350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:25 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a090000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 995.439430][T24754] loop4: p1 p2 p3 < > p4 [ 995.448491][T24754] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 995.496577][T24754] loop4: p4 size 3657465856 extends beyond EOD, truncated 01:55:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:25 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000005ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 995.656265][T24769] loop2: p1 < > p2 p3 < > p4 [ 995.662346][T24769] loop2: partition table partially beyond EOD, truncated [ 995.688572][T24769] loop2: p1 start 13657 is beyond EOD, truncated [ 995.697719][T24769] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 995.699227][T24763] loop1: p1 p2 p3 < > p4 [ 995.716766][T24763] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 995.727103][T24769] loop2: p3 start 225 is beyond EOD, truncated [ 995.733503][T24769] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 995.757813][T24777] loop3: p1 p2 p3 < > p4 [ 995.763436][T24777] loop3: partition table partially beyond EOD, truncated [ 995.776886][T24763] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 995.809087][T24777] loop3: p1 start 2314 is beyond EOD, truncated [ 995.830118][T24777] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 995.865817][T24777] loop3: p3 start 225 is beyond EOD, truncated [ 995.895543][T24777] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:25 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 996.004792][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:55:25 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000005a350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 996.113247][T24800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:26 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:26 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000006ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:26 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 996.470210][T24899] loop1: p1 p2 p3 < > p4 [ 996.488041][T24899] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:26 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 996.583951][T24899] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 996.625735][T24945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.649878][T24918] loop2: p1 < > p2 p3 < > p4 [ 996.657612][T24918] loop2: partition table partially beyond EOD, truncated [ 996.673727][T24918] loop2: p1 start 13658 is beyond EOD, truncated [ 996.698093][T24918] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 996.711759][T24918] loop2: p3 start 225 is beyond EOD, truncated [ 996.720381][T24918] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 996.728724][T24945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 996.772025][T24936] loop3: p1 p2 p3 < > p4 [ 996.776554][T24936] loop3: partition table partially beyond EOD, truncated [ 996.793232][T24936] loop3: p1 start 2570 is beyond EOD, truncated [ 996.799721][T24936] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:26 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 996.835029][T24936] loop3: p3 start 225 is beyond EOD, truncated 01:55:26 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000406ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:26 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a020300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 996.904863][T24936] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:26 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000005c350000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 997.012977][T25061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.070715][T25061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:27 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0b0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:27 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:27 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000007ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 997.347129][T25076] loop1: p1 p2 p3 < > p4 [ 997.352735][T25082] loop2: p1 < > p2 p3 < > p4 [ 997.361164][T25076] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 997.367706][T25082] loop2: partition table partially beyond EOD, truncated [ 997.378002][T25082] loop2: p1 start 13660 is beyond EOD, truncated [ 997.384342][T25082] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 997.396293][T25076] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 997.414349][T25183] loop3: p1 p2 p3 < > p4 [ 997.419471][T25082] loop2: p3 start 225 is beyond EOD, truncated [ 997.419633][T25183] loop3: partition table partially beyond EOD, truncated [ 997.433899][T25082] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 997.514366][T25183] loop3: p1 start 2826 is beyond EOD, truncated [ 997.566128][T25183] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 997.589132][T25183] loop3: p3 start 225 is beyond EOD, truncated [ 997.594750][T25189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.595676][T25183] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 997.698324][T25189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:27 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a260300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 998.170723][T25311] loop1: p1 p2 p3 < > p4 [ 998.187173][T25311] loop1: partition table partially beyond EOD, truncated [ 998.195287][T25311] loop1: p1 start 206346 is beyond EOD, truncated [ 998.217565][T25311] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 998.228831][T25311] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:29 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:29 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000005d6b0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000009ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a2a0300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 999.474666][T25346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 999.504451][T25347] loop3: p1 p2 p3 < > p4 [ 999.514508][T25347] loop3: partition table partially beyond EOD, truncated [ 999.524593][T25347] loop3: p1 start 3082 is beyond EOD, truncated [ 999.535106][T25347] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 999.542560][T25346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 999.564902][T25347] loop3: p3 start 225 is beyond EOD, truncated [ 999.601592][T25347] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 999.619898][T25344] loop2: p1 < > p2 p3 < > p4 [ 999.626045][T25344] loop2: partition table partially beyond EOD, truncated [ 999.652228][T25344] loop2: p1 start 27485 is beyond EOD, truncated [ 999.659789][T25342] loop1: p1 p2 p3 < > p4 [ 999.675698][T25342] loop1: partition table partially beyond EOD, truncated [ 999.681249][T25344] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 999.690741][T25342] loop1: p1 start 207370 is beyond EOD, truncated [ 999.697723][T25342] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 999.711273][T25344] loop2: p3 start 225 is beyond EOD, truncated [ 999.733571][T25342] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 999.746287][T25344] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:29 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000affffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:29 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0d0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a020400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:29 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000001cb20700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1000.170405][T25474] loop3: p1 p2 p3 < > p4 [ 1000.185543][T25474] loop3: partition table partially beyond EOD, truncated [ 1000.206040][T25474] loop3: p1 start 3338 is beyond EOD, truncated [ 1000.227873][T25474] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1000.256498][T25474] loop3: p3 start 225 is beyond EOD, truncated [ 1000.265130][T25478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1000.292802][T25474] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1000.338346][T25478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1000.367043][T25523] loop1: p1 p2 p3 < > p4 [ 1000.391077][T25523] loop1: partition table partially beyond EOD, truncated [ 1000.406245][T25523] loop1: p1 start 262666 is beyond EOD, truncated [ 1000.416422][T25523] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1000.446853][T25523] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1000.495768][T25557] loop2: p1 < > p2 p3 < > p4 [ 1000.511499][T25557] loop2: partition table partially beyond EOD, truncated 01:55:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000bffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1000.565387][T25557] loop2: p1 start 504348 is beyond EOD, truncated [ 1000.630358][T25557] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1000.686887][T25557] loop2: p3 start 225 is beyond EOD, truncated [ 1000.697352][T25557] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:32 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:32 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:32 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0e0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:32 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a060400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:32 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:32 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000008ff10700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1002.501580][T25629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1002.598097][T25629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1002.614772][T25624] loop3: p1 p2 p3 < > p4 [ 1002.627370][T25624] loop3: partition table partially beyond EOD, truncated [ 1002.640549][T25624] loop3: p1 start 3594 is beyond EOD, truncated [ 1002.667547][T25624] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1002.676322][T25624] loop3: p3 start 225 is beyond EOD, truncated [ 1002.688251][T25624] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:32 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1002.745062][T25625] loop2: p1 < > p2 p3 < > p4 [ 1002.752537][T25627] loop1: p1 p2 p3 < > p4 [ 1002.756901][T25625] loop2: partition table partially beyond EOD, truncated [ 1002.789345][T25625] loop2: p1 start 520591 is beyond EOD, truncated [ 1002.793286][T25627] loop1: partition table partially beyond EOD, truncated [ 1002.804030][T25627] loop1: p1 start 263690 is beyond EOD, truncated [ 1002.805054][T25625] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1002.810934][T25627] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1002.838589][T25625] loop2: p3 start 225 is beyond EOD, truncated [ 1002.844780][T25625] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1002.865056][T25627] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:32 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000dffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1003.004997][T25746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:55:32 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a100000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:32 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1003.178495][T25746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:33 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000000b2310800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1003.404101][T25871] loop3: p1 p2 p3 < > p4 [ 1003.408817][T25871] loop3: partition table partially beyond EOD, truncated [ 1003.432179][T25871] loop3: p1 start 4106 is beyond EOD, truncated [ 1003.465214][T25871] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1003.500016][T25871] loop3: p3 start 225 is beyond EOD, truncated [ 1003.508454][T25873] loop1: p1 p2 p3 < > p4 01:55:33 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1003.512882][T25873] loop1: partition table partially beyond EOD, truncated [ 1003.514536][T25871] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1003.530543][T25873] loop1: p1 start 327690 is beyond EOD, truncated [ 1003.537116][T25873] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1003.547354][T25873] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1003.581092][T25879] loop2: p1 < > p2 p3 < > p4 [ 1003.585976][T25879] loop2: partition table partially beyond EOD, truncated [ 1003.597993][T25879] loop2: p1 start 537010 is beyond EOD, truncated [ 1003.611884][T25879] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1003.650632][T25879] loop2: p3 start 225 is beyond EOD, truncated [ 1003.670905][T25879] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1003.705662][T25889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1003.792965][T25889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:35 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:35 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000effffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a110000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020105000000ffe0f505ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1005.615547][T26013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1005.659669][T26014] loop2: p1 < > p2 p3 < > p4 [ 1005.664926][T26014] loop2: partition table partially beyond EOD, truncated [ 1005.673492][T26013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1005.689207][T26014] loop2: p1 start 99999999 is beyond EOD, truncated [ 1005.697243][T26014] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1005.720116][T26014] loop2: p3 start 225 is beyond EOD, truncated [ 1005.726590][T26014] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1005.758292][T26015] loop1: p1 p2 p3 < > p4 [ 1005.762717][T26015] loop1: partition table partially beyond EOD, truncated 01:55:35 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1005.775208][T26015] loop1: p1 start 393226 is beyond EOD, truncated [ 1005.782510][T26015] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1005.791709][T26015] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1005.855174][T26017] loop3: p1 p2 p3 < > p4 01:55:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1005.880187][T26017] loop3: partition table partially beyond EOD, truncated [ 1005.904932][T26017] loop3: p1 start 4362 is beyond EOD, truncated [ 1005.913928][T26017] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1005.935793][T26017] loop3: p3 start 225 is beyond EOD, truncated [ 1005.967592][T26017] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:35 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700400fffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:35 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a020000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:36 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a120000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1006.256632][T26136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1006.343559][T26136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1006.365259][T26212] loop2: p1 < > p2 p3 < > p4 [ 1006.370197][T26212] loop2: partition table partially beyond EOD, truncated [ 1006.387780][T26212] loop2: p1 start 522 is beyond EOD, truncated 01:55:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000011ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1006.394508][T26212] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1006.408579][T26212] loop2: p3 start 225 is beyond EOD, truncated [ 1006.415092][T26212] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1006.529198][T26265] loop3: p1 p2 p3 < > p4 [ 1006.533848][T26265] loop3: partition table partially beyond EOD, truncated [ 1006.572874][T26265] loop3: p1 start 4618 is beyond EOD, truncated [ 1006.586536][T26265] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1006.596218][T26265] loop3: p3 start 225 is beyond EOD, truncated [ 1006.604371][T26265] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1006.623847][T26230] loop1: p1 p2 p3 < > p4 [ 1006.628554][T26230] loop1: partition table partially beyond EOD, truncated [ 1006.635987][T26230] loop1: p1 start 394250 is beyond EOD, truncated [ 1006.642602][T26230] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1006.654878][T26230] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:36 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a030000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:36 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000012ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:36 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:36 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a250000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1006.959123][T26283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1007.127831][T26283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1007.198550][T26361] loop2: p1 < > p2 p3 < > p4 [ 1007.224961][T26361] loop2: partition table partially beyond EOD, truncated [ 1007.240171][T26361] loop2: p1 start 778 is beyond EOD, truncated [ 1007.246508][T26361] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1007.270415][T26361] loop2: p3 start 225 is beyond EOD, truncated [ 1007.288361][T26361] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1007.303942][T26406] loop3: p1 p2 p3 < > p4 [ 1007.310873][T26406] loop3: partition table partially beyond EOD, truncated [ 1007.347657][T26391] loop1: p1 p2 p3 < > p4 [ 1007.368664][T26391] loop1: partition table partially beyond EOD, truncated [ 1007.395386][T26406] loop3: p1 start 9482 is beyond EOD, truncated [ 1007.412398][T26391] loop1: p1 start 458762 is beyond EOD, truncated [ 1007.417634][T26406] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1007.422698][T26391] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1007.436325][T26391] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1007.451566][T26406] loop3: p3 start 225 is beyond EOD, truncated [ 1007.458203][T26406] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:38 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:38 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700001fffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:38 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:38 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a040000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:38 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000900ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:38 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a480000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1008.961328][T26443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1009.008339][T26443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1009.058635][T26445] loop3: p1 p2 p3 < > p4 [ 1009.073366][T26445] loop3: partition table partially beyond EOD, truncated [ 1009.081586][T26445] loop3: p1 start 18442 is beyond EOD, truncated [ 1009.089694][T26445] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1009.099040][T26445] loop3: p3 start 225 is beyond EOD, truncated [ 1009.105441][T26445] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1009.115025][T26440] loop2: p1 < > p2 p3 < > p4 [ 1009.126204][T26440] loop2: partition table partially beyond EOD, truncated 01:55:39 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000020ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1009.149786][T26444] loop1: p1 p2 p3 < > p4 [ 1009.155152][T26440] loop2: p1 start 1034 is beyond EOD, truncated [ 1009.165629][T26440] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1009.173266][T26444] loop1: partition table partially beyond EOD, truncated [ 1009.188039][T26444] loop1: p1 start 589834 is beyond EOD, truncated 01:55:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1009.199584][T26444] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1009.208482][T26440] loop2: p3 start 225 is beyond EOD, truncated [ 1009.215025][T26440] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1009.233956][T26444] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1009.289099][T26558] print_req_error: 23 callbacks suppressed [ 1009.289110][T26558] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1009.291565][T26559] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1009.301557][T26445] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1009.335684][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.347072][ T2504] buffer_io_error: 20 callbacks suppressed [ 1009.347081][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1009.361640][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.373031][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1009.381602][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.392593][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.400939][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.411867][ T2504] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1009.420046][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.431019][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.439928][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.450858][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.459257][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.470150][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.470334][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1009.489199][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.497829][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1009.505979][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1009.555088][T26563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1009.648664][T26563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:39 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a4c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:39 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:39 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a050000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:39 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000025ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1009.987087][T26687] loop3: p1 p2 p3 < > p4 [ 1009.998455][T26687] loop3: partition table partially beyond EOD, truncated [ 1010.017847][T26687] loop3: p1 start 19466 is beyond EOD, truncated [ 1010.043611][T26687] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1010.074819][T26687] loop3: p3 start 225 is beyond EOD, truncated [ 1010.092498][T26690] loop2: p1 < > p2 p3 < > p4 [ 1010.098071][T26687] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1010.105772][T26684] loop1: p1 p2 p3 < > p4 [ 1010.110421][T26690] loop2: partition table partially beyond EOD, truncated [ 1010.118111][T26684] loop1: partition table partially beyond EOD, truncated [ 1010.143021][T26690] loop2: p1 start 1290 is beyond EOD, truncated [ 1010.150271][T26684] loop1: p1 start 655370 is beyond EOD, truncated [ 1010.170238][T26690] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1010.178264][T26684] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1010.196748][T26690] loop2: p3 start 225 is beyond EOD, truncated [ 1010.207125][T26684] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1010.228457][T26690] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:41 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:41 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700032cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:41 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a5c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:41 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000b00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:41 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a060000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1012.121001][T26726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1012.163971][T26728] loop2: p1 < > p2 p3 < > p4 [ 1012.177852][T26726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1012.195363][T26728] loop2: partition table partially beyond EOD, truncated [ 1012.205633][T26728] loop2: p1 start 1546 is beyond EOD, truncated [ 1012.227637][T26728] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1012.244480][T26728] loop2: p3 start 225 is beyond EOD, truncated [ 1012.253557][T26728] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/55}, 0x18) [ 1012.283640][T26725] loop3: p1 p2 p3 < > p4 [ 1012.296356][T26724] loop1: p1 p2 p3 < > p4 [ 1012.328738][T26725] loop3: partition table partially beyond EOD, truncated [ 1012.336835][T26724] loop1: partition table partially beyond EOD, truncated [ 1012.344549][T26724] loop1: p1 start 720906 is beyond EOD, truncated [ 1012.363852][T26724] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1012.372744][T26725] loop3: p1 start 23562 is beyond EOD, truncated 01:55:42 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700032effffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1012.380103][T26724] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1012.407629][T26725] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1012.438760][T26725] loop3: p3 start 225 is beyond EOD, truncated [ 1012.446500][T26725] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:42 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a070000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:42 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:42 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a600000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000005c0)=""/223, 0xfc61) lsetxattr(&(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000006c0)='NET_DM\x00', 0x7, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x80011, r2, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000100)=0x1) openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000002c0)={@initdev, @broadcast, @remote}, &(0x7f0000000300)=0xc) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)='keyringppp1\x00', 0xc, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x0, 0x0) [ 1012.933327][T26969] loop3: p1 p2 p3 < > p4 [ 1012.939570][T26969] loop3: partition table partially beyond EOD, truncated [ 1012.958163][T26969] loop3: p1 start 24586 is beyond EOD, truncated [ 1012.969830][T26969] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1012.978434][T26973] loop1: p1 p2 p3 < > p4 [ 1012.982804][T26973] loop1: partition table partially beyond EOD, truncated [ 1012.993922][T26969] loop3: p3 start 225 is beyond EOD, truncated [ 1013.016596][T26969] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1013.025532][T26972] loop2: p1 < > p2 p3 < > p4 [ 1013.037854][T26973] loop1: p1 start 786442 is beyond EOD, truncated [ 1013.044278][T26973] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1013.057163][T26972] loop2: partition table partially beyond EOD, truncated [ 1013.065715][T26973] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1013.076386][T26972] loop2: p1 start 1802 is beyond EOD, truncated [ 1013.108208][T26972] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1013.131977][T26972] loop2: p3 start 225 is beyond EOD, truncated [ 1013.203578][T26972] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:44 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:44 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700033cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:44 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000360357704621b645b7e785fa66d596b9060e4afaa1c1e26f9817fa57786496f9c0dada0aee4834a80d67906d87d39f668f090c4baee1e493b412fe5efab29b24ad29f7da83a71f8b96b938b3d8fe17a0abddef8da0", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0xfffffc5c}}, 0x0) 01:55:44 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a680000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:44 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a080000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1015.199356][T27108] loop1: p1 p2 p3 < > p4 [ 1015.205695][T27108] loop1: partition table partially beyond EOD, truncated [ 1015.218583][T27108] loop1: p1 start 851978 is beyond EOD, truncated [ 1015.226144][T27108] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1015.244991][T27108] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1015.323882][T27109] loop3: p1 p2 p3 < > p4 [ 1015.342690][T27109] loop3: partition table partially beyond EOD, truncated [ 1015.361649][T27111] loop2: p1 < > p2 p3 < > p4 [ 1015.367177][T27111] loop2: partition table partially beyond EOD, truncated 01:55:45 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1015.367539][T27109] loop3: p1 start 26634 is beyond EOD, truncated [ 1015.390814][T27109] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1015.400993][T27111] loop2: p1 start 2058 is beyond EOD, truncated [ 1015.408622][T27109] loop3: p3 start 225 is beyond EOD, truncated [ 1015.415769][T27109] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:45 executing program 4: unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.snckprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="34c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878bfddcb23aff02a78a8da2560890b8f323579e28943ebc6c05f442ec35dc9be3a5688ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8c"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setns(r0, 0x0) [ 1015.423054][T27111] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1015.448076][T27111] loop2: p3 start 225 is beyond EOD, truncated [ 1015.456438][T27111] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700003fffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1015.639496][T27226] loop1: p1 p2 p3 < > p4 [ 1015.666170][T27226] loop1: partition table partially beyond EOD, truncated 01:55:45 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a6c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:45 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a090000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1015.708922][T27226] loop1: p1 start 917514 is beyond EOD, truncated [ 1015.723974][T27226] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:45 executing program 4: unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.snckprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="34c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878bfddcb23aff02a78a8da2560890b8f323579e28943ebc6c05f442ec35dc9be3a5688ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8c"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setns(r0, 0x0) [ 1015.812136][T27226] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1015.975734][T27226] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1016.058585][T27355] print_req_error: 12 callbacks suppressed [ 1016.058599][T27355] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1016.063831][T27356] blk_update_request: I/O error, dev loop1, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1016.076524][T27360] blk_update_request: I/O error, dev loop1, sector 205952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:55:45 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:45 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000040ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:45 executing program 4: r0 = socket(0x1e, 0x805, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f0000000100)=@assoc_value, 0x8) [ 1016.096166][ T2504] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.100490][T27350] loop2: p1 < > p2 p3 < > p4 [ 1016.110334][ T2504] buffer_io_error: 10 callbacks suppressed [ 1016.110342][ T2504] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 1016.116993][ T2504] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.140140][ T2504] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 1016.141735][T27351] loop3: p1 p2 p3 < > p4 [ 1016.153391][ T2505] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.157640][T27350] loop2: partition table partially beyond EOD, truncated [ 1016.164489][ T2505] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 1016.179785][ T2505] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.190881][ T2505] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 1016.199104][ T2505] blk_update_request: I/O error, dev loop1, sector 205952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.210437][ T2505] Buffer I/O error on dev loop1p4, logical block 51488, async page read [ 1016.210477][ T2505] blk_update_request: I/O error, dev loop1, sector 205956 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.210487][ T2505] Buffer I/O error on dev loop1p4, logical block 51489, async page read [ 1016.212030][ T2505] blk_update_request: I/O error, dev loop1, sector 225 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.219836][T27351] loop3: partition table partially beyond EOD, truncated 01:55:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a400f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1016.230278][ T2505] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 1016.240517][ T2504] Buffer I/O error on dev loop1p4, logical block 51540, async page read [ 1016.256874][ T2504] Buffer I/O error on dev loop1p4, logical block 51541, async page read [ 1016.273399][ T2504] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 1016.290086][T27350] loop2: p1 start 2314 is beyond EOD, truncated [ 1016.323650][T27350] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1016.342151][T27351] loop3: p1 start 27658 is beyond EOD, truncated [ 1016.378815][T27350] loop2: p3 start 225 is beyond EOD, truncated [ 1016.387370][T27351] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1016.413809][T27350] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c0045006, &(0x7f0000000000)=0x7b) [ 1016.429380][T27351] loop3: p3 start 225 is beyond EOD, truncated [ 1016.445777][T27351] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0xd4b844e26e19b36f, 0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0xfe41, 0x2, 0x0, 0x800e0052f) shutdown(r0, 0x0) [ 1016.658759][T27434] loop1: p1 p2 p3 < > p4 [ 1016.707905][T27434] loop1: partition table partially beyond EOD, truncated 01:55:46 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000240ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:46 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:46 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a740000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1016.750860][T27434] loop1: p1 start 999434 is beyond EOD, truncated [ 1016.788609][T27434] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1016.832231][T27434] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:46 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000013000)) 01:55:46 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 01:55:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001100ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1017.081315][T27693] loop3: p1 p2 p3 < > p4 [ 1017.092991][T27693] loop3: partition table partially beyond EOD, truncated [ 1017.107857][T27693] loop3: p1 start 29706 is beyond EOD, truncated [ 1017.114352][T27693] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1017.128892][T27787] loop2: p1 < > p2 p3 < > p4 [ 1017.133583][T27787] loop2: partition table partially beyond EOD, truncated [ 1017.176064][T27693] loop3: p3 start 225 is beyond EOD, truncated [ 1017.204916][T27693] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1017.230561][T27787] loop2: p1 start 2570 is beyond EOD, truncated 01:55:47 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:47 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000f40ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1017.291672][T27787] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1017.360491][T27787] loop2: p3 start 225 is beyond EOD, truncated 01:55:47 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 01:55:47 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a7a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1017.408655][T27787] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1017.443560][T27944] loop1: p1 p2 p3 < > p4 [ 1017.470774][T27944] loop1: partition table partially beyond EOD, truncated 01:55:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8afafcc7f896e6356f33f0f7eec25a4e1875ed562cedf1e14f7aa27e04e3a1e5d9f1abe8ca70741698976049ea21c99eff15232d3f96919a4b2e5981f446739c95c27ee0decbef91dfa38c4cb64e6e4bf19d144948ec2e66eddccff3", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1017.514266][T27944] loop1: p1 start 1114122 is beyond EOD, truncated [ 1017.526895][T27944] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1017.543001][T27944] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:47 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0b0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1017.709128][T28043] loop3: p1 p2 p3 < > p4 01:55:47 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000048ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1017.757567][T28043] loop3: partition table partially beyond EOD, truncated 01:55:47 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:47 executing program 4: r0 = memfd_create(&(0x7f0000000080)=':\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1017.854345][T28043] loop3: p1 start 31242 is beyond EOD, truncated [ 1017.885424][T28043] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1017.928654][T28043] loop3: p3 start 225 is beyond EOD, truncated [ 1017.937527][T28043] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1017.948454][T28054] loop2: p1 < > p2 p3 < > p4 [ 1017.957899][T28054] loop2: partition table partially beyond EOD, truncated [ 1017.965152][T28054] loop2: p1 start 2826 is beyond EOD, truncated [ 1018.000599][T28069] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/3' not defined. [ 1018.022148][T28054] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1018.032792][T28054] loop2: p3 start 225 is beyond EOD, truncated [ 1018.052096][T28054] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1018.078618][T28063] loop1: p1 p2 p3 < > p4 [ 1018.083011][T28063] loop1: partition table partially beyond EOD, truncated 01:55:47 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a900000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:48 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1018.098632][T28063] loop1: p1 start 1179658 is beyond EOD, truncated [ 1018.105181][T28063] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1018.123787][T28063] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700004cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1018.318145][T28177] loop3: p1 p2 p3 < > p4 [ 1018.324798][T28177] loop3: partition table partially beyond EOD, truncated 01:55:48 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:48 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:48 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1018.376700][T28177] loop3: p1 start 36874 is beyond EOD, truncated [ 1018.443137][T28177] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1018.493122][T28177] loop3: p3 start 225 is beyond EOD, truncated [ 1018.528181][T28177] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1018.624749][T28294] loop2: p1 < > p2 p3 < > p4 [ 1018.632460][T28294] loop2: partition table partially beyond EOD, truncated [ 1018.665229][T28294] loop2: p1 start 3082 is beyond EOD, truncated [ 1018.679776][T28310] vhci_hcd: invalid port number 0 [ 1018.688998][T28292] loop1: p1 p2 p3 < > p4 [ 1018.695759][T28292] loop1: partition table partially beyond EOD, truncated [ 1018.717061][T28294] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1018.749170][T28292] loop1: p1 start 1835018 is beyond EOD, truncated 01:55:48 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1018.769980][T28294] loop2: p3 start 225 is beyond EOD, truncated [ 1018.789694][T28292] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1018.803582][T28294] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:48 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 01:55:48 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000ad80000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:48 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000055ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1018.831492][T28292] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1018.977560][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:55:48 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:48 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) 01:55:49 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0d0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700005cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1019.198531][T28327] loop3: p1 p2 p3 < > p4 [ 1019.202923][T28327] loop3: partition table partially beyond EOD, truncated 01:55:49 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{}]}) [ 1019.324445][T28327] loop3: p1 start 55306 is beyond EOD, truncated 01:55:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)=',vmnet0em1\x00') rmdir(&(0x7f0000000240)='./file0//ile0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = epoll_create1(0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x408200) openat(r4, 0x0, 0x4800, 0x190) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f00000006c0)={0x7f, 0x0, 0x6, 0x20, 0x32, 0x100, 0x0, 0x2, 0x4, 0x41, 0x55, 0x2, 0x7, 0x0, &(0x7f0000000640)=""/70, 0x2, 0x101, 0x8}) add_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000240)={0x0, 0x401, 0x1000}) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000200)=0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffa, 0xe7282c74fd71c51e) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xbe, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/190}, &(0x7f00000000c0)=0x78) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r9, 0x5609, &(0x7f0000000240)={0xffff, 0x401, 0x1000}) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x65ff) open(0x0, 0x400, 0x10) 01:55:49 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 1019.401196][T28327] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1019.424763][T28327] loop3: p3 start 225 is beyond EOD, truncated [ 1019.431181][T28327] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1019.464933][T28448] loop1: p1 p2 p3 < > p4 [ 1019.490013][T28448] loop1: partition table partially beyond EOD, truncated [ 1019.538498][T28448] loop1: p1 start 2031626 is beyond EOD, truncated [ 1019.548104][T28448] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1019.576686][T28448] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1019.633610][T28451] loop2: p1 < > p2 p3 < > p4 01:55:49 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1019.658452][T28451] loop2: partition table partially beyond EOD, truncated [ 1019.672576][T28451] loop2: p1 start 3338 is beyond EOD, truncated 01:55:49 executing program 0: r0 = gettid() r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 1019.707768][T28451] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1019.734799][T28451] loop2: p3 start 225 is beyond EOD, truncated [ 1019.765387][T28451] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:49 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000060ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:49 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a002000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1019.850220][T28572] loop3: p1 p2 p3 < > p4 [ 1019.854724][T28572] loop3: partition table partially beyond EOD, truncated [ 1019.879618][T28572] loop3: p1 start 132106 is beyond EOD, truncated 01:55:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:55:49 executing program 4: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) fsync(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000013, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1019.929537][T28572] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1019.955804][T28572] loop3: p3 start 225 is beyond EOD, truncated [ 1020.008043][T28572] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:49 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0e0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1020.168496][T28591] loop1: p1 p2 p3 < > p4 [ 1020.184920][T28591] loop1: partition table partially beyond EOD, truncated [ 1020.204727][T28591] loop1: p1 start 2097162 is beyond EOD, truncated 01:55:50 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000740)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:55:50 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1020.257730][T28591] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1020.282988][T28591] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1020.369988][T28591] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1020.433903][T28684] loop2: p1 < > p2 p3 < > p4 01:55:50 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a002500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000260ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1020.457062][T28684] loop2: partition table partially beyond EOD, truncated [ 1020.477876][T28684] loop2: p1 start 3594 is beyond EOD, truncated [ 1020.486681][T28684] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1020.533982][T28684] loop2: p3 start 225 is beyond EOD, truncated [ 1020.550591][T28684] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1020.604802][T28712] loop3: p1 p2 p3 < > p4 [ 1020.610731][T28712] loop3: partition table partially beyond EOD, truncated 01:55:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'batadv0\x00', {0x2, 0x4e24, @remote}}) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) [ 1020.651008][T28712] loop3: p1 start 196618 is beyond EOD, truncated [ 1020.687632][T28712] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1020.698870][T28712] loop3: p3 start 225 is beyond EOD, truncated [ 1020.705207][T28712] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1020.719047][T28821] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) 01:55:50 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a100000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:50 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700ad64ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:50 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a032600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:55:50 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a260300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:51 executing program 4: [ 1021.163724][T28874] loop2: p1 < > p2 p3 < > p4 [ 1021.182474][T28874] loop2: partition table partially beyond EOD, truncated [ 1021.263843][T28923] loop1: p1 p2 p3 < > p4 [ 1021.268588][T28874] loop2: p1 start 4106 is beyond EOD, truncated [ 1021.277724][T28874] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1021.285006][T28923] loop1: partition table partially beyond EOD, truncated [ 1021.301169][T28923] loop1: p1 start 2491146 is beyond EOD, truncated [ 1021.312061][T28874] loop2: p3 start 225 is beyond EOD, truncated [ 1021.320566][T28874] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1021.321112][T28923] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1021.347929][T28923] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:51 executing program 4: [ 1021.398797][T28951] loop3: p1 p2 p3 < > p4 [ 1021.414459][T28951] loop3: partition table partially beyond EOD, truncated [ 1021.430074][T28951] loop3: p1 start 206346 is beyond EOD, truncated [ 1021.454001][T28951] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1021.462937][T28951] loop3: p3 start 225 is beyond EOD, truncated [ 1021.469442][T28951] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:51 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000068ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1021.561323][T28967] print_req_error: 797 callbacks suppressed [ 1021.561335][T28967] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1021.572485][T28874] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1021.591262][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.602258][ T2504] buffer_io_error: 785 callbacks suppressed 01:55:51 executing program 4: [ 1021.602266][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.616967][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.627931][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.628405][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.647666][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.657597][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.668540][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.679766][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.690754][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.709109][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.720139][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.720692][ T2504] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.739255][ T2504] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.748288][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.759281][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.767508][ T2505] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.778463][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 1021.786656][ T2505] Buffer I/O error on dev loop2p2, logical block 0, async page read 01:55:51 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a032a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:51 executing program 4: 01:55:51 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a110000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:55:51 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a020400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:52 executing program 4: 01:55:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700006cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1022.247768][T28985] loop1: p1 p2 p3 < > p4 [ 1022.255715][T28985] loop1: partition table partially beyond EOD, truncated 01:55:52 executing program 4: [ 1022.301436][T28985] loop1: p1 start 2753290 is beyond EOD, truncated [ 1022.320719][T28998] loop2: p1 < > p2 p3 < > p4 [ 1022.331207][T28985] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1022.368407][T28998] loop2: partition table partially beyond EOD, truncated [ 1022.392991][T28985] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1022.401033][T29006] loop3: p1 p2 p3 < > p4 [ 1022.407733][T29006] loop3: partition table partially beyond EOD, truncated 01:55:52 executing program 4: [ 1022.430008][T28998] loop2: p1 start 4362 is beyond EOD, truncated [ 1022.449375][T29006] loop3: p1 start 262666 is beyond EOD, truncated [ 1022.457645][T28998] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1022.461767][T29006] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:52 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a003f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1022.476453][T28998] loop2: p3 start 225 is beyond EOD, truncated [ 1022.486927][T29006] loop3: p3 start 225 is beyond EOD, truncated [ 1022.494928][T29006] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1022.515694][T28998] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:52 executing program 4: 01:55:52 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000074ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:52 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a060400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:52 executing program 4: 01:55:52 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a120000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1022.840822][T29030] loop1: p1 p2 p3 < > p4 [ 1022.862807][T29030] loop1: partition table partially beyond EOD, truncated [ 1022.916050][T29030] loop1: p1 start 4128778 is beyond EOD, truncated [ 1022.942611][T29030] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1022.980885][T29030] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:52 executing program 4: 01:55:52 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:52 executing program 4: 01:55:52 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1023.107912][T29044] loop3: p1 p2 p3 < > p4 [ 1023.121101][T29044] loop3: partition table partially beyond EOD, truncated [ 1023.134327][T29044] loop3: p1 start 263690 is beyond EOD, truncated [ 1023.142219][T29044] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1023.150378][T29044] loop3: p3 start 225 is beyond EOD, truncated [ 1023.156680][T29044] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1023.190200][T29046] loop2: p1 < > p2 p3 < > p4 01:55:53 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1023.220112][T29046] loop2: partition table partially beyond EOD, truncated 01:55:53 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:53 executing program 4: [ 1023.268875][T29046] loop2: p1 start 4618 is beyond EOD, truncated [ 1023.290728][T29046] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:53 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1023.319150][T29046] loop2: p3 start 225 is beyond EOD, truncated [ 1023.349748][T29046] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:55:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700007affffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:53 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 1023.614504][T29076] loop3: p1 p2 p3 < > p4 [ 1023.644071][T29076] loop3: partition table partially beyond EOD, truncated [ 1023.668656][T29073] loop1: p1 p2 p3 < > p4 [ 1023.679944][T29073] loop1: partition table partially beyond EOD, truncated 01:55:53 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a250000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1023.716070][T29076] loop3: p1 start 327690 is beyond EOD, truncated [ 1023.736477][T29073] loop1: p1 start 4194314 is beyond EOD, truncated [ 1023.757903][T29073] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x8080020004000, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000000)="b2cf0d2e", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1023.762290][T29076] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1023.780148][T29073] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1023.788688][T29076] loop3: p3 start 225 is beyond EOD, truncated [ 1023.799448][T29076] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:53 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0f4000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:53 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000280ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1024.058310][T29106] loop2: p1 < > p2 p3 < > p4 [ 1024.067085][T29106] loop2: partition table partially beyond EOD, truncated 01:55:53 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1024.107831][T29106] loop2: p1 start 9482 is beyond EOD, truncated [ 1024.154032][T29106] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1024.248177][T29106] loop2: p3 start 225 is beyond EOD, truncated [ 1024.254402][T29106] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1024.297013][T29112] loop1: p1 p2 p3 < > p4 [ 1024.331506][T29112] loop1: partition table partially beyond EOD, truncated [ 1024.369080][T29112] loop1: p1 start 4198154 is beyond EOD, truncated [ 1024.376135][T29226] loop5: p1 p2 p3 < > p4 [ 1024.385644][T29112] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1024.385741][T29226] loop5: p1 size 33556479 extends beyond EOD, truncated [ 1024.412627][T29226] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 1024.431905][T29226] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1024.450800][T29112] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1024.472041][T29227] loop3: p1 p2 p3 < > p4 01:55:54 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1024.484458][T29227] loop3: partition table partially beyond EOD, truncated 01:55:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000090ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1024.542551][T29227] loop3: p1 start 393226 is beyond EOD, truncated [ 1024.623273][T29227] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:54 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a480000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1024.715289][T29227] loop3: p3 start 225 is beyond EOD, truncated [ 1024.737700][T29227] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:54 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:54 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a040600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1024.979089][T29253] loop2: p1 < > p2 p3 < > p4 [ 1024.984071][T29253] loop2: partition table partially beyond EOD, truncated [ 1025.002588][T29253] loop2: p1 start 18442 is beyond EOD, truncated [ 1025.017443][T29253] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1025.031793][T29253] loop2: p3 start 225 is beyond EOD, truncated [ 1025.038913][T29253] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1025.066635][T29257] loop1: p1 p2 p3 < > p4 [ 1025.077595][T29257] loop1: partition table partially beyond EOD, truncated 01:55:54 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070064adffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1025.108574][T29257] loop1: p1 start 4718602 is beyond EOD, truncated [ 1025.148737][T29257] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:55 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a4c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1025.181908][T29257] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:55 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1025.348289][T29264] loop3: p1 p2 p3 < > p4 [ 1025.356040][T29264] loop3: partition table partially beyond EOD, truncated [ 1025.389492][T29264] loop3: p1 start 394250 is beyond EOD, truncated [ 1025.396150][T29264] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1025.412727][T29264] loop3: p3 start 225 is beyond EOD, truncated [ 1025.425436][T29264] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1025.541058][T29274] loop2: p1 < > p2 p3 < > p4 [ 1025.546001][T29274] loop2: partition table partially beyond EOD, truncated [ 1025.559574][T29274] loop2: p1 start 19466 is beyond EOD, truncated [ 1025.566148][T29274] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1025.580313][T29274] loop2: p3 start 225 is beyond EOD, truncated [ 1025.586702][T29274] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1025.795196][T29279] loop1: p1 p2 p3 < > p4 [ 1025.820825][T29279] loop1: partition table partially beyond EOD, truncated [ 1025.843521][T29279] loop1: p1 start 4980746 is beyond EOD, truncated [ 1025.854216][T29279] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1025.873293][T29279] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0xf5abaec1e6dbdaca, 0x0) connect(r4, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x0, &(0x7f0000000180), 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x0, 0x400000400080803, 0x0) dup(r7) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002000)="0164bb1b3cee91d2d23fd07164e71a7801f5084d8bbddc585359319c5af5ff173d56777cbbacaf7a2230a3decfd93551c04a6802ecc89b510747e5a0a2386a08d8adcb6d093332537d945054cbe7622106975a139d6ea1d907c98abd45fd30b082028e3bbd7f4297240740d6e94e6b58f7c9702fed673cfc90a7d126ffefbb22168c", 0x82}, {&(0x7f0000002100)="9ded0933fadacbada31ad7b75482074167847b16d8ccdde9b9012cb97c10a85ff942c8f98c1d075f7d5a3367a81d5afc07e162b62f982ed1e7a3", 0x3a}], 0x2}}], 0x1, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r9, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) 01:55:57 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:57 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070002b0ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a5c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a005500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1027.404194][T29357] loop3: p1 p2 p3 < > p4 [ 1027.410124][T29357] loop3: partition table partially beyond EOD, truncated [ 1027.424512][T29357] loop3: p1 start 458762 is beyond EOD, truncated [ 1027.432526][T29357] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:55:57 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x1e0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') sendfile(r0, r1, 0x0, 0x8) [ 1027.452667][T29357] loop3: p3 start 225 is beyond EOD, truncated [ 1027.460078][T29357] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1027.507789][T29363] loop1: p1 p2 p3 < > p4 [ 1027.512853][T29364] loop2: p1 < > p2 p3 < > p4 [ 1027.515805][T29363] loop1: partition table partially beyond EOD, truncated [ 1027.525098][T29363] loop1: p1 start 5570570 is beyond EOD, truncated [ 1027.528908][T29364] loop2: partition table partially beyond EOD, truncated [ 1027.531937][T29363] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1027.546323][T29364] loop2: p1 start 23562 is beyond EOD, truncated [ 1027.553410][T29364] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1027.577320][T29364] loop2: p3 start 225 is beyond EOD, truncated [ 1027.584481][T29364] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1027.598138][T29363] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:55:57 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070003b2ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000900ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a600000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a005c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x8000608004500b, &(0x7f0000000140)) [ 1028.080848][T29598] loop3: p1 p2 p3 < > p4 01:55:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1028.101433][T29598] loop3: partition table partially beyond EOD, truncated [ 1028.110350][T29602] loop2: p1 < > p2 p3 < > p4 [ 1028.121846][T29602] loop2: partition table partially beyond EOD, truncated [ 1028.134139][T29602] loop2: p1 start 24586 is beyond EOD, truncated [ 1028.143573][T29602] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:55:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1028.149031][T29598] loop3: p1 start 589834 is beyond EOD, truncated [ 1028.157357][T29598] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1028.165701][T29598] loop3: p3 start 225 is beyond EOD, truncated [ 1028.173425][T29602] loop2: p3 start 225 is beyond EOD, truncated [ 1028.181057][T29598] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1028.184989][T29602] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1028.231452][T29605] loop1: p1 p2 p3 < > p4 [ 1028.262741][T29605] loop1: partition table partially beyond EOD, truncated [ 1028.293623][T29605] loop1: p1 start 6029322 is beyond EOD, truncated [ 1028.329973][T29605] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:55:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1028.383990][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1028.399226][T29605] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1028.439457][T29623] print_req_error: 23 callbacks suppressed [ 1028.439470][T29623] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1028.445477][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.467864][ T2504] buffer_io_error: 20 callbacks suppressed [ 1028.467872][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.468602][T29624] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1028.473819][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.481861][T29598] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1028.493043][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.493176][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:55:58 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000d0ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1028.504709][T29641] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1028.511713][T29602] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1028.549074][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.565104][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.576040][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.597643][T29697] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1028.597661][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.620440][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.628901][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1028.639835][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read 01:55:58 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a680000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1028.648088][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.656208][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.664435][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.672666][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1028.707767][T29621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:55:58 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:58 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:58 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000d2ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:58 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1029.140218][T29747] loop2: p1 < > p2 p3 < > p4 [ 1029.161384][T29747] loop2: partition table partially beyond EOD, truncated [ 1029.197961][T29747] loop2: p1 start 26634 is beyond EOD, truncated [ 1029.207442][T29747] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1029.221680][T29747] loop2: p3 start 225 is beyond EOD, truncated [ 1029.226841][T29765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1029.230922][T29747] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1029.259109][T29751] loop1: p1 p2 p3 < > p4 [ 1029.264748][T29752] loop3: p1 p2 p3 < > p4 [ 1029.269462][T29751] loop1: partition table partially beyond EOD, truncated [ 1029.282518][T29752] loop3: partition table partially beyond EOD, truncated [ 1029.291321][T29752] loop3: p1 start 655370 is beyond EOD, truncated [ 1029.298655][T29751] loop1: p1 start 6291466 is beyond EOD, truncated 01:55:59 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1029.305913][T29752] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1029.314180][T29751] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1029.339206][T29751] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1029.397941][T29765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1029.414743][T29752] loop3: p3 start 225 is beyond EOD, truncated [ 1029.421819][T29752] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:55:59 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000eeffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:59 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:55:59 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000aad6400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:55:59 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a6c0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:59 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000b00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:55:59 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1029.930867][T29901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1030.037961][T29901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.070873][T29902] loop3: p1 p2 p3 < > p4 [ 1030.076087][T29893] loop1: p1 p2 p3 < > p4 [ 1030.098486][T29902] loop3: partition table partially beyond EOD, truncated [ 1030.108498][T29893] loop1: partition table partially beyond EOD, truncated [ 1030.119501][T29937] loop2: p1 < > p2 p3 < > p4 [ 1030.124334][T29937] loop2: partition table partially beyond EOD, truncated 01:56:00 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:00 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000fffffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1030.145332][T29902] loop3: p1 start 720906 is beyond EOD, truncated [ 1030.155068][T29893] loop1: p1 start 6597898 is beyond EOD, truncated [ 1030.164230][T29937] loop2: p1 start 27658 is beyond EOD, truncated [ 1030.177943][T29902] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1030.185365][T29893] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1030.193109][T29937] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1030.214665][T29937] loop2: p3 start 225 is beyond EOD, truncated [ 1030.223110][T29937] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1030.244660][T29893] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:56:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1030.292694][T29902] loop3: p3 start 225 is beyond EOD, truncated 01:56:00 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) [ 1030.337560][T29902] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:00 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1030.462641][T30031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1030.548480][T30031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:00 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:00 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a740000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:00 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:00 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000002ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1030.867129][T30111] loop1: p1 p2 p3 < > p4 [ 1030.877902][T30111] loop1: partition table partially beyond EOD, truncated [ 1030.895803][T30111] loop1: p1 start 6815754 is beyond EOD, truncated [ 1030.933338][T30160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1030.939458][T30111] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1030.958187][T30157] loop3: p1 p2 p3 < > p4 [ 1030.968369][T30157] loop3: partition table partially beyond EOD, truncated [ 1030.983064][T30157] loop3: p1 start 786442 is beyond EOD, truncated [ 1030.994075][T30157] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1030.996837][T30159] loop2: p1 < > p2 p3 < > p4 [ 1031.006927][T30111] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1031.014802][T30159] loop2: partition table partially beyond EOD, truncated [ 1031.022317][T30157] loop3: p3 start 225 is beyond EOD, truncated [ 1031.029836][T30157] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1031.042328][T30159] loop2: p1 start 29706 is beyond EOD, truncated [ 1031.065836][T30160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1031.087576][T30159] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1031.104495][T30159] loop2: p3 start 225 is beyond EOD, truncated [ 1031.115103][T30159] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:01 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:01 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:01 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000003ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:01 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a7a0000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1031.595550][T30284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.702992][T30373] loop1: p1 p2 p3 < > p4 [ 1031.710838][T30373] loop1: partition table partially beyond EOD, truncated [ 1031.718632][T30284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1031.741230][T30373] loop1: p1 start 7077898 is beyond EOD, truncated [ 1031.750539][T30373] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1031.765342][T30398] loop2: p1 < > p2 p3 < > p4 [ 1031.772175][T30373] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1031.779235][T30398] loop2: partition table partially beyond EOD, truncated [ 1031.798455][T30368] loop3: p1 p2 p3 < > p4 [ 1031.802895][T30368] loop3: partition table partially beyond EOD, truncated [ 1031.811353][T30398] loop2: p1 start 31242 is beyond EOD, truncated [ 1031.824671][T30368] loop3: p1 start 851978 is beyond EOD, truncated [ 1031.837580][T30398] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1031.863577][T30368] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1031.873256][T30398] loop2: p3 start 225 is beyond EOD, truncated [ 1031.886280][T30368] loop3: p3 start 225 is beyond EOD, truncated 01:56:01 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000004ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1031.908306][T30368] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1031.925824][T30398] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:01 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:01 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a007400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:02 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1032.255662][T30422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1032.279664][T30423] loop1: p1 p2 p3 < > p4 [ 1032.284185][T30423] loop1: partition table partially beyond EOD, truncated [ 1032.311924][T30423] loop1: p1 start 7602186 is beyond EOD, truncated [ 1032.324254][T30423] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1032.352686][T30423] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1032.362964][T30422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1032.425858][T30531] loop3: p1 p2 p3 < > p4 [ 1032.431990][T30531] loop3: partition table partially beyond EOD, truncated [ 1032.441854][T30531] loop3: p1 start 917514 is beyond EOD, truncated [ 1032.453701][T30531] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1032.466915][T30531] loop3: p3 start 225 is beyond EOD, truncated [ 1032.474458][T30531] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1032.589206][T30423] __loop_clr_fd: partition scan of loop1 failed (rc=-16) 01:56:03 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:03 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a900000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:03 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000005ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:03 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:03 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a400f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:03 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a007a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1033.922041][T30560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1033.945036][T30565] loop3: p1 p2 p3 < > p4 [ 1033.963270][T30565] loop3: partition table partially beyond EOD, truncated [ 1033.984282][T30565] loop3: p1 start 999434 is beyond EOD, truncated [ 1033.997269][T30565] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1034.006010][T30560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1034.022066][T30565] loop3: p3 start 225 is beyond EOD, truncated [ 1034.028525][T30565] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:03 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1034.131889][T30564] loop2: p1 < > p2 p3 < > p4 [ 1034.140585][T30563] loop1: p1 p2 p3 < > p4 [ 1034.145236][T30564] loop2: partition table partially beyond EOD, truncated [ 1034.158008][T30563] loop1: partition table partially beyond EOD, truncated [ 1034.165429][T30564] loop2: p1 start 36874 is beyond EOD, truncated [ 1034.172633][T30563] loop1: p1 start 7995402 is beyond EOD, truncated [ 1034.174122][T30564] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1034.179524][T30563] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1034.210968][T30563] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1034.228898][T30564] loop2: p3 start 225 is beyond EOD, truncated [ 1034.237986][T30564] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:04 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000006ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:04 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001100ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1034.354667][T30679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1034.438491][T30679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:04 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a009000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:04 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a040200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:04 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1034.838340][T30790] loop3: p1 p2 p3 < > p4 [ 1034.847739][T30790] loop3: partition table partially beyond EOD, truncated [ 1034.868257][T30803] loop2: p1 < > p2 p3 < > p4 [ 1034.873133][T30803] loop2: partition table partially beyond EOD, truncated [ 1034.896189][T30790] loop3: p1 start 1114122 is beyond EOD, truncated [ 1034.904068][T30803] loop2: p1 start 132106 is beyond EOD, truncated [ 1034.914757][T30803] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1034.922219][T30790] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1034.925764][T30804] loop1: p1 p2 p3 < > p4 [ 1034.935160][T30803] loop2: p3 start 225 is beyond EOD, truncated [ 1034.942589][T30790] loop3: p3 start 225 is beyond EOD, truncated [ 1034.943032][T30804] loop1: partition table partially beyond EOD, truncated [ 1034.949140][T30803] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1034.963590][T30790] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1034.973112][T30804] loop1: p1 start 9437194 is beyond EOD, truncated [ 1034.987636][T30804] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1035.018488][T30804] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1035.057302][T30813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1035.127975][T30813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:06 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300), &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:06 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000007ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:06 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a64ad00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:06 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:06 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:06 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1036.968304][T30939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1037.018277][T30939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.040038][T30940] loop1: p1 p2 p3 < > p4 [ 1037.045769][T30940] loop1: partition table partially beyond EOD, truncated [ 1037.060762][T30940] loop1: p1 start 11363338 is beyond EOD, truncated [ 1037.071045][T30940] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1037.082291][T30940] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1037.105503][T30942] loop3: p1 p2 p3 < > p4 [ 1037.113467][T30942] loop3: partition table partially beyond EOD, truncated [ 1037.137935][T30942] loop3: p1 start 1179658 is beyond EOD, truncated [ 1037.146922][T30942] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1037.161617][T30942] loop3: p3 start 225 is beyond EOD, truncated [ 1037.173704][T30942] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:07 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1037.203034][T30937] loop2: p1 < > p2 p3 < > p4 [ 1037.217638][T30937] loop2: partition table partially beyond EOD, truncated 01:56:07 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000008ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:07 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a00d400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1037.270121][T30937] loop2: p1 start 196618 is beyond EOD, truncated [ 1037.305747][T30937] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1037.314563][T30937] loop2: p3 start 225 is beyond EOD, truncated [ 1037.321427][T30937] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1037.375844][T31057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1037.431791][T31057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:07 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a020400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:07 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:07 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1037.822385][T31170] loop1: p1 p2 p3 < > p4 [ 1037.868059][T31170] loop1: partition table partially beyond EOD, truncated [ 1037.890354][T31170] loop1: p1 start 13893642 is beyond EOD, truncated [ 1037.904476][T31182] loop2: p1 < > p2 p3 < > p4 [ 1037.913399][T31182] loop2: partition table partially beyond EOD, truncated [ 1037.930312][T31170] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1037.943311][T31182] loop2: p1 start 262666 is beyond EOD, truncated [ 1037.944213][T31189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1037.953061][T31182] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1037.988080][T31182] loop2: p3 start 225 is beyond EOD, truncated [ 1038.029339][T31182] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1038.031364][T31187] loop3: p1 p2 p3 < > p4 [ 1038.036685][T31170] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1038.042945][T31187] loop3: partition table partially beyond EOD, truncated [ 1038.059198][T31189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1038.085182][T31187] loop3: p1 start 2031626 is beyond EOD, truncated [ 1038.092100][T31187] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1038.155947][T31187] loop3: p3 start 225 is beyond EOD, truncated [ 1038.195381][T31187] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1038.374660][T31187] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1038.375354][T31302] print_req_error: 830 callbacks suppressed [ 1038.375366][T31302] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1038.410031][T31303] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1038.429649][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.440694][ T2505] buffer_io_error: 815 callbacks suppressed [ 1038.440703][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.460325][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.471456][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.479797][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.490758][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.502508][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.513485][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.522567][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.534319][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.542653][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.553618][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.561968][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.572882][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1038.581249][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1038.592206][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1038.600358][ T2505] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 1038.608446][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read 01:56:09 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:09 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000009ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:09 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:09 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a00d800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:09 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a060400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:09 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a002000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1039.977006][T31323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1040.058200][T31323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1040.101180][T31321] loop1: p1 p2 p3 < > p4 [ 1040.105768][T31320] loop2: p1 < > p2 p3 < > p4 [ 1040.114868][T31321] loop1: partition table partially beyond EOD, truncated [ 1040.122617][T31320] loop2: partition table partially beyond EOD, truncated [ 1040.136659][T31321] loop1: p1 start 14155786 is beyond EOD, truncated [ 1040.144008][T31320] loop2: p1 start 263690 is beyond EOD, truncated [ 1040.156097][T31321] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1040.172885][T31320] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1040.186684][T31321] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1040.198267][T31322] loop3: p1 p2 p3 < > p4 [ 1040.220829][T31320] loop2: p3 start 225 is beyond EOD, truncated [ 1040.228002][T31322] loop3: partition table partially beyond EOD, truncated [ 1040.243926][T31322] loop3: p1 start 2097162 is beyond EOD, truncated [ 1040.249939][T31320] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:10 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a00de00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1040.265518][T31322] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:56:10 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:10 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000affffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1040.317382][T31322] loop3: p3 start 225 is beyond EOD, truncated [ 1040.334386][T31322] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:10 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1040.578532][T31439] loop1: p1 p2 p3 < > p4 01:56:10 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a002500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1040.614329][T31439] loop1: partition table partially beyond EOD, truncated [ 1040.644951][T31439] loop1: p1 start 14549002 is beyond EOD, truncated [ 1040.656280][T31439] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1040.659179][T31443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1040.675528][T31439] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:56:10 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a02fe00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1040.767812][T31443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1040.790535][T31516] loop2: p1 < > p2 p3 < > p4 [ 1040.801466][T31516] loop2: partition table partially beyond EOD, truncated [ 1040.843002][T31516] loop2: p1 start 327690 is beyond EOD, truncated [ 1040.875807][T31516] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1040.901649][T31516] loop2: p3 start 225 is beyond EOD, truncated [ 1040.917629][T31516] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1040.926467][T31554] loop3: p1 p2 p3 < > p4 [ 1040.936531][T31554] loop3: partition table partially beyond EOD, truncated [ 1040.944079][T31554] loop3: p1 start 2424842 is beyond EOD, truncated [ 1040.954093][T31554] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1040.962025][T31554] loop3: p3 start 225 is beyond EOD, truncated [ 1040.968430][T31554] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1041.149892][T31569] loop1: p1 p2 p3 < > p4 [ 1041.154346][T31569] loop1: partition table partially beyond EOD, truncated [ 1041.207798][T31569] loop1: p1 start 16646666 is beyond EOD, truncated [ 1041.225584][T31569] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1041.251782][T31569] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:56:12 executing program 4: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff08000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:12 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000bffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:12 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:12 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:12 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a032600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:12 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0fff00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1043.069031][T31604] loop3: p1 p2 p3 < > p4 [ 1043.091857][T31604] loop3: partition table partially beyond EOD, truncated [ 1043.100605][T31604] loop3: p1 start 2491146 is beyond EOD, truncated [ 1043.107201][T31604] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1043.119369][T31604] loop3: p3 start 225 is beyond EOD, truncated [ 1043.125562][T31604] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1043.178330][T31605] loop2: p1 < > p2 p3 < > p4 [ 1043.184030][T31605] loop2: partition table partially beyond EOD, truncated [ 1043.195366][T31605] loop2: p1 start 393226 is beyond EOD, truncated [ 1043.203442][T31605] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1043.211498][T31605] loop2: p3 start 225 is beyond EOD, truncated [ 1043.218536][T31605] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1043.230877][T31602] loop1: p1 p2 p3 < > p4 [ 1043.235793][T31602] loop1: partition table partially beyond EOD, truncated [ 1043.247986][T31602] loop1: p1 start 16715530 is beyond EOD, truncated [ 1043.274062][T31602] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1043.283535][T31602] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1043.309494][T31606] loop4: p1 p2 p3 < > p4 [ 1043.314696][T31606] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 1043.326757][T31606] loop4: p4 size 3657465856 extends beyond EOD, truncated 01:56:13 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:13 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:13 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a003f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:13 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a040600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:13 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1043.863439][T31642] loop1: p1 p2 p3 < > p4 [ 1043.869761][T31642] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1043.898189][T31642] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1043.923029][T31652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1043.981238][T31645] loop3: p1 p2 p3 < > p4 [ 1043.988602][T31652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1044.006807][T31645] loop3: partition table partially beyond EOD, truncated [ 1044.017359][T31645] loop3: p1 start 4128778 is beyond EOD, truncated [ 1044.037347][T31645] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1044.051152][T31645] loop3: p3 start 225 is beyond EOD, truncated [ 1044.060917][T31645] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1044.076699][T31648] loop2: p1 < > p2 p3 < > p4 [ 1044.094402][T31648] loop2: partition table partially beyond EOD, truncated 01:56:14 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1044.143460][T31648] loop2: p1 start 394250 is beyond EOD, truncated 01:56:14 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:14 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000dffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1044.227120][T31648] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1044.318747][T31648] loop2: p3 start 225 is beyond EOD, truncated [ 1044.350451][T31648] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1044.455933][T31777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1044.477134][T31773] loop1: p1 p2 p3 < > p4 [ 1044.489129][T31773] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1044.505648][T31773] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1044.556215][T31777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:15 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:15 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:15 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:15 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:15 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000effffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:15 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1046.114004][T31907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1046.128460][T31911] loop2: p1 < > p2 p3 < > p4 [ 1046.148084][T31911] loop2: partition table partially beyond EOD, truncated [ 1046.164409][T31911] loop2: p1 start 458762 is beyond EOD, truncated [ 1046.172622][T31911] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1046.181466][T31911] loop2: p3 start 225 is beyond EOD, truncated [ 1046.187869][T31911] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1046.196705][T31907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1046.214586][T31908] loop1: p1 p2 p3 < > p4 [ 1046.221397][T31908] loop1: partition table partially beyond EOD, truncated [ 1046.259689][T31910] loop3: p1 p2 p3 < > p4 [ 1046.276844][T31908] loop1: p1 start 262154 is beyond EOD, truncated [ 1046.279708][T31910] loop3: partition table partially beyond EOD, truncated [ 1046.294975][T31908] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1046.313582][T31908] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1046.336118][T31910] loop3: p1 start 4194314 is beyond EOD, truncated [ 1046.343243][T31910] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1046.351919][T31910] loop3: p3 start 225 is beyond EOD, truncated [ 1046.360810][T31910] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:16 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000900ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:16 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:16 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000010ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:16 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:16 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0f4000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1046.806546][T32037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1046.868894][T32039] loop2: p1 < > p2 p3 < > p4 [ 1046.873951][T32039] loop2: partition table partially beyond EOD, truncated [ 1046.881591][T32039] loop2: p1 start 589834 is beyond EOD, truncated [ 1046.888267][T32039] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1046.900157][T32037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1046.931478][T32039] loop2: p3 start 225 is beyond EOD, truncated [ 1046.942437][T32039] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1047.008987][T32132] loop3: p1 p2 p3 < > p4 [ 1047.012036][T32109] loop1: p1 p2 p3 < > p4 [ 1047.020276][T32132] loop3: partition table partially beyond EOD, truncated [ 1047.057782][T32109] loop1: partition table partially beyond EOD, truncated [ 1047.065061][T32109] loop1: p1 start 327690 is beyond EOD, truncated [ 1047.076691][T32132] loop3: p1 start 4198154 is beyond EOD, truncated [ 1047.086584][T32132] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1047.094395][T32109] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:56:17 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000011ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1047.121610][T32132] loop3: p3 start 225 is beyond EOD, truncated [ 1047.132060][T32109] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1047.152448][T32132] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:18 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:18 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:18 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:18 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:18 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:18 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000012ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1049.186057][T32193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1049.223652][T32196] loop2: p1 < > p2 p3 < > p4 [ 1049.235874][T32196] loop2: partition table partially beyond EOD, truncated [ 1049.249084][T32196] loop2: p1 start 655370 is beyond EOD, truncated [ 1049.255526][T32196] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1049.265267][T32193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.287837][T32196] loop2: p3 start 225 is beyond EOD, truncated [ 1049.294402][T32196] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1049.366801][T32198] loop3: p1 p2 p3 < > p4 [ 1049.372989][T32195] loop1: p1 p2 p3 < > p4 [ 1049.377335][T32195] loop1: partition table partially beyond EOD, truncated [ 1049.395293][T32198] loop3: partition table partially beyond EOD, truncated 01:56:19 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1049.453139][T32198] loop3: p1 start 4718602 is beyond EOD, truncated [ 1049.464076][T32195] loop1: p1 start 393226 is beyond EOD, truncated [ 1049.477800][T32198] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1049.485160][T32195] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:56:19 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000b00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1049.508202][T32198] loop3: p3 start 225 is beyond EOD, truncated [ 1049.534974][T32198] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1049.542376][T32195] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:56:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000025ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:19 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1049.808667][T32317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1049.878861][T32344] loop2: p1 < > p2 p3 < > p4 [ 1049.888176][T32344] loop2: partition table partially beyond EOD, truncated [ 1049.901876][T32344] loop2: p1 start 720906 is beyond EOD, truncated [ 1049.909329][T32344] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:56:19 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1049.918053][T32317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.946376][T32344] loop2: p3 start 225 is beyond EOD, truncated [ 1049.958025][T32344] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1049.991217][T32433] loop1: p1 p2 p3 < > p4 01:56:19 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000048ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1050.014585][T32433] loop1: partition table partially beyond EOD, truncated [ 1050.048134][T32433] loop1: p1 start 458762 is beyond EOD, truncated [ 1050.056036][T32433] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1050.065926][T32433] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1050.328230][T32441] loop3: p1 p2 p3 < > p4 [ 1050.341081][T32441] loop3: partition table partially beyond EOD, truncated [ 1050.375108][T32441] loop3: p1 start 4980746 is beyond EOD, truncated [ 1050.383337][T32441] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1050.393782][T32441] loop3: p3 start 225 is beyond EOD, truncated [ 1050.401747][T32441] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1050.618633][T32441] loop3: p1 p2 p3 < > p4 [ 1050.622988][T32441] loop3: partition table partially beyond EOD, truncated [ 1050.630516][T32441] loop3: p1 start 4980746 is beyond EOD, truncated [ 1050.637020][T32441] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1050.645014][T32441] loop3: p3 start 225 is beyond EOD, truncated [ 1050.651266][T32441] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:21 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:21 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:21 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:21 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:21 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700004cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:21 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a005c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1052.243493][T32480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1052.291818][T32480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1052.323607][T32478] loop1: p1 p2 p3 < > p4 [ 1052.358946][T32483] loop3: p1 p2 p3 < > p4 [ 1052.359066][T32478] loop1: partition table partially beyond EOD, truncated [ 1052.374812][T32483] loop3: partition table partially beyond EOD, truncated [ 1052.382369][T32478] loop1: p1 start 524298 is beyond EOD, truncated [ 1052.389414][T32478] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1052.402049][T32478] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1052.409944][T32479] loop2: p1 < > p2 p3 < > p4 [ 1052.414922][T32479] loop2: partition table partially beyond EOD, truncated [ 1052.422586][T32479] loop2: p1 start 786442 is beyond EOD, truncated [ 1052.434233][T32483] loop3: p1 start 6029322 is beyond EOD, truncated [ 1052.434353][T32479] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1052.448652][T32483] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:56:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000055ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1052.482808][T32483] loop3: p3 start 225 is beyond EOD, truncated [ 1052.512027][T32483] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1052.530537][T32479] loop2: p3 start 225 is beyond EOD, truncated [ 1052.570997][T32479] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:22 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:22 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000900ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:22 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:22 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1052.932780][T32614] loop1: p1 p2 p3 < > p4 01:56:22 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700005cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1053.000381][T32614] loop1: partition table partially beyond EOD, truncated [ 1053.045138][T32614] loop1: p1 start 589834 is beyond EOD, truncated [ 1053.058614][T32614] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1053.071205][T32614] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1053.106080][T32726] loop2: p1 < > p2 p3 < > p4 [ 1053.113723][T32726] loop2: partition table partially beyond EOD, truncated [ 1053.132439][T32726] loop2: p1 start 851978 is beyond EOD, truncated [ 1053.142425][T32726] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1053.154051][T32726] loop2: p3 start 225 is beyond EOD, truncated [ 1053.168936][T32709] loop3: p1 p2 p3 < > p4 [ 1053.170631][T32726] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1053.176182][T32709] loop3: partition table partially beyond EOD, truncated [ 1053.204184][T32709] loop3: p1 start 6291466 is beyond EOD, truncated [ 1053.213867][T32709] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1053.223866][T32709] loop3: p3 start 225 is beyond EOD, truncated [ 1053.232169][T32709] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:25 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:25 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:25 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a000e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:25 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000060ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:25 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1055.303069][T32760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1055.330788][T32758] loop2: p1 < > p2 p3 < > p4 [ 1055.338331][T32758] loop2: partition table partially beyond EOD, truncated [ 1055.360023][T32758] loop2: p1 start 917514 is beyond EOD, truncated [ 1055.366741][T32758] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1055.374442][T32760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1055.398838][T32758] loop2: p3 start 225 is beyond EOD, truncated [ 1055.405309][T32758] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1055.457381][T32762] loop3: p1 p2 p3 < > p4 [ 1055.462309][T32761] loop1: p1 p2 p3 < > p4 [ 1055.470449][T32762] loop3: partition table partially beyond EOD, truncated [ 1055.479661][T32761] loop1: partition table partially beyond EOD, truncated [ 1055.502372][T32762] loop3: p1 start 6815754 is beyond EOD, truncated [ 1055.513096][T32761] loop1: p1 start 655370 is beyond EOD, truncated [ 1055.545185][T32762] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:56:25 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:25 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a400f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1055.552542][T32761] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1055.567370][T32761] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1055.588563][T32762] loop3: p3 start 225 is beyond EOD, truncated [ 1055.639554][T32762] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:25 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000068ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:25 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000b00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:25 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a006c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1055.927192][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.058240][ T456] loop2: p1 < > p2 p3 < > p4 [ 1056.074536][ T456] loop2: partition table partially beyond EOD, truncated [ 1056.082256][ T413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.098004][ T456] loop2: p1 start 999434 is beyond EOD, truncated [ 1056.119480][ T456] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1056.149233][ T456] loop2: p3 start 225 is beyond EOD, truncated [ 1056.156721][ T456] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1056.219496][ T525] loop1: p1 p2 p3 < > p4 [ 1056.224858][ T525] loop1: partition table partially beyond EOD, truncated [ 1056.254706][ T525] loop1: p1 start 720906 is beyond EOD, truncated 01:56:26 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1056.273429][ T525] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1056.299289][ T525] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1056.350753][ T532] loop3: p1 p2 p3 < > p4 01:56:26 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700006cffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1056.377111][ T532] loop3: partition table partially beyond EOD, truncated [ 1056.402878][ T532] loop3: p1 start 7077898 is beyond EOD, truncated [ 1056.467675][ T532] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1056.496125][ T532] loop3: p3 start 225 is beyond EOD, truncated [ 1056.517813][ T532] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1056.602500][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.688109][ T549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:28 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:28 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a001100ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:28 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:28 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a007400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:28 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000074ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1058.349540][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1058.384382][ T682] loop1: p1 p2 p3 < > p4 [ 1058.407958][ T686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1058.420604][ T682] loop1: partition table partially beyond EOD, truncated [ 1058.452527][ T682] loop1: p1 start 786442 is beyond EOD, truncated [ 1058.459526][ T682] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1058.474426][ T682] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1058.520270][ T684] loop3: p1 p2 p3 < > p4 [ 1058.525134][ T684] loop3: partition table partially beyond EOD, truncated [ 1058.543302][ T684] loop3: p1 start 7602186 is beyond EOD, truncated 01:56:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1058.582580][ T684] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1058.600381][ T684] loop3: p3 start 225 is beyond EOD, truncated [ 1058.606824][ T684] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1058.623209][ T680] loop2: p1 < > p2 p3 < > p4 [ 1058.628711][ T680] loop2: partition table partially beyond EOD, truncated [ 1058.636535][ T680] loop2: p1 start 1114122 is beyond EOD, truncated [ 1058.667795][ T680] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:56:28 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700007affffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1058.717163][ T680] loop2: p3 start 225 is beyond EOD, truncated [ 1058.747887][ T680] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:28 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000d00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:28 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a007a00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:28 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a001200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1059.046456][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.124885][ T822] loop3: p1 p2 p3 < > p4 [ 1059.132479][ T807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1059.158374][ T822] loop3: partition table partially beyond EOD, truncated [ 1059.165897][ T822] loop3: p1 start 7995402 is beyond EOD, truncated [ 1059.188659][ T822] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1059.204734][ T822] loop3: p3 start 225 is beyond EOD, truncated [ 1059.212981][ T822] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1059.239672][ T895] loop1: p1 p2 p3 < > p4 01:56:29 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) [ 1059.274917][ T895] loop1: partition table partially beyond EOD, truncated [ 1059.307353][ T895] loop1: p1 start 851978 is beyond EOD, truncated [ 1059.316343][ T895] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1059.326428][ T928] loop2: p1 < > p2 p3 < > p4 [ 1059.339431][ T895] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1059.346813][ T928] loop2: partition table partially beyond EOD, truncated [ 1059.409956][ T928] loop2: p1 start 1179658 is beyond EOD, truncated 01:56:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:56:29 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000d0ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:29 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a009000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1059.480489][ T928] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1059.510586][ T928] loop2: p3 start 225 is beyond EOD, truncated [ 1059.528674][ T928] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1059.637253][ T944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:56:29 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000e00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:29 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a001f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1059.797846][ T944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1059.988330][ T978] loop3: p1 p2 p3 < > p4 [ 1059.992873][ T978] loop3: partition table partially beyond EOD, truncated [ 1060.007995][ T978] loop3: p1 start 9437194 is beyond EOD, truncated [ 1060.014981][ T978] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1060.023540][ T978] loop3: p3 start 225 is beyond EOD, truncated [ 1060.030094][ T978] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1060.089806][ T1062] loop1: p1 p2 p3 < > p4 [ 1060.094174][ T1062] loop1: partition table partially beyond EOD, truncated [ 1060.120715][ T1064] loop2: p1 < > p2 p3 < > p4 [ 1060.125528][ T1064] loop2: partition table partially beyond EOD, truncated 01:56:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000d2ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1060.159953][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1060.168052][ T1062] loop1: p1 start 917514 is beyond EOD, truncated [ 1060.174495][ T1062] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1060.189707][ T1064] loop2: p1 start 2031626 is beyond EOD, truncated [ 1060.222668][ T1062] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1060.245701][ T1064] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:56:30 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x401004000000016) 01:56:30 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a00d800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1060.278588][ T1080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1060.295546][ T1064] loop2: p3 start 225 is beyond EOD, truncated [ 1060.351198][ T1064] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:30 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:30 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000eeffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:30 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a002000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1060.661241][ T1196] loop3: p1 p2 p3 < > p4 [ 1060.674565][ T1196] loop3: partition table partially beyond EOD, truncated 01:56:30 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1060.704165][ T1196] loop3: p1 start 14155786 is beyond EOD, truncated [ 1060.749116][ T1204] loop1: p1 p2 p3 < > p4 [ 1060.765060][ T1204] loop1: partition table partially beyond EOD, truncated [ 1060.777042][ T1196] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1060.800629][ T1204] loop1: p1 start 1048586 is beyond EOD, truncated [ 1060.815974][ T1196] loop3: p3 start 225 is beyond EOD, truncated [ 1060.827730][ T1204] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1060.830142][ T1196] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1060.919501][ T1204] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1060.937169][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1060.959929][ T1223] print_req_error: 12 callbacks suppressed [ 1060.959942][ T1223] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1060.977946][ T1196] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1060.985888][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1060.996993][ T2505] buffer_io_error: 10 callbacks suppressed [ 1060.997001][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.011924][ T2505] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.023193][ T2505] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.032058][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.043678][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.052210][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.063856][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.077781][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.088707][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.097094][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.108684][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.116844][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.127845][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.128191][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.128204][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.128301][ T2504] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.128312][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.128401][ T2504] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 1061.189285][ T1218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:31 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) 01:56:31 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1061.323981][ T1222] loop2: p1 < > p2 p3 < > p4 [ 1061.345297][ T1222] loop2: partition table partially beyond EOD, truncated 01:56:31 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001100ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1061.386040][ T1222] loop2: p1 start 2097162 is beyond EOD, truncated [ 1061.410457][ T1222] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:56:31 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a0fff00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:31 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000005000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1061.451567][ T1222] loop2: p3 start 225 is beyond EOD, truncated [ 1061.482644][ T1222] loop2: p4 size 3657465856 extends beyond EOD, truncated 01:56:31 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a002500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1061.722004][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1061.802162][ T1483] loop3: p1 p2 p3 < > p4 [ 1061.810983][ T1467] loop1: p1 p2 p3 < > p4 [ 1061.811244][ T1483] loop3: partition table partially beyond EOD, truncated [ 1061.826099][ T1448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.845988][ T1483] loop3: p1 start 16715530 is beyond EOD, truncated [ 1061.848026][ T1467] loop1: partition table partially beyond EOD, truncated [ 1061.868288][ T1467] loop1: p1 start 1114122 is beyond EOD, truncated [ 1061.873583][ T1508] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 1061.887589][ T1483] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1061.979222][ T1467] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1061.994205][ T1508] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 1062.021121][ T1467] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1062.029503][ T1483] loop3: p3 start 225 is beyond EOD, truncated [ 1062.038954][ T1578] loop2: p1 < > p2 p3 < > p4 [ 1062.043771][ T1578] loop2: partition table partially beyond EOD, truncated [ 1062.056565][ T1483] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:31 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1062.104487][ T1578] loop2: p1 start 2424842 is beyond EOD, truncated [ 1062.157793][ T1578] loop2: p2 size 1073741824 extends beyond EOD, truncated 01:56:32 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1062.204429][ T1578] loop2: p3 start 225 is beyond EOD, truncated 01:56:32 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 1062.275755][ T1578] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1062.343712][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:56:32 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000200ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1062.487862][ T1587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.558668][ T1699] loop1: p1 p2 p3 < > p4 [ 1062.572150][ T1699] loop1: partition table partially beyond EOD, truncated [ 1062.591517][ T1699] loop1: p1 start 1179658 is beyond EOD, truncated [ 1062.605705][ T1699] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:56:32 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:32 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a003f00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1062.644940][ T1699] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1062.733497][ T1704] loop3: p1 p2 p3 < > p4 [ 1062.739777][ T1704] loop3: partition table partially beyond EOD, truncated [ 1062.757007][ T1704] loop3: p1 start 131082 is beyond EOD, truncated [ 1062.767250][ T1704] loop3: p2 size 1073741824 extends beyond EOD, truncated 01:56:32 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a001c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1062.793616][ T1704] loop3: p3 start 225 is beyond EOD, truncated [ 1062.812299][ T1704] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1062.875176][ T1708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1062.979658][ T1761] loop2: p1 < > p2 p3 < > p4 [ 1062.987391][ T1761] loop2: partition table partially beyond EOD, truncated [ 1062.995423][ T1761] loop2: p1 start 4128778 is beyond EOD, truncated [ 1063.005710][ T1761] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1063.013249][ T1708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:56:32 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000300ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1063.030815][ T1761] loop2: p3 start 225 is beyond EOD, truncated [ 1063.043036][ T1761] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1063.108351][ T1826] loop1: p1 p2 p3 < > p4 [ 1063.113019][ T1826] loop1: partition table partially beyond EOD, truncated [ 1063.141726][ T1826] loop1: p1 start 1835018 is beyond EOD, truncated [ 1063.154292][ T1826] loop1: p2 size 1073741824 extends beyond EOD, truncated 01:56:33 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff070000000000000f000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:33 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1063.232690][ T1826] loop1: p4 size 3657465856 extends beyond EOD, truncated 01:56:33 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a004000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:33 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) tkill(r0, 0x401004000000016) [ 1063.379520][ T1830] loop3: p1 p2 p3 < > p4 [ 1063.384007][ T1830] loop3: partition table partially beyond EOD, truncated [ 1063.542982][ T1830] loop3: p1 start 196618 is beyond EOD, truncated [ 1063.618110][ T1830] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1063.780647][ T1830] loop3: p3 start 225 is beyond EOD, truncated 01:56:33 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a002500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:33 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000042000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1063.920120][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1064.073440][ T1830] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1064.219970][ T1867] loop2: p1 < > p2 p3 < > p4 [ 1064.312501][ T1867] loop2: partition table partially beyond EOD, truncated [ 1064.407928][ T1851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1064.500153][ T1867] loop2: p1 start 4194314 is beyond EOD, truncated [ 1064.653582][ T1867] loop2: p2 size 1073741824 extends beyond EOD, truncated [ 1064.880491][ T1867] loop2: p3 start 225 is beyond EOD, truncated 01:56:34 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:56:34 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000400ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1065.047631][ T1867] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1065.365243][ T2082] loop1: p1 p2 p3 < > p4 [ 1065.491359][ T2082] loop1: partition table partially beyond EOD, truncated 01:56:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:56:35 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000054000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1065.878323][ T2082] loop1: p1 start 2424842 is beyond EOD, truncated 01:56:35 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a0f4000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1066.033033][ T2082] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 1066.411294][ T2082] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1066.778485][ T2170] loop3: p1 p2 p3 < > p4 01:56:36 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) [ 1067.110320][ T2170] loop3: partition table partially beyond EOD, truncated 01:56:37 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000055000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1067.543483][ T2170] loop3: p1 start 262154 is beyond EOD, truncated 01:56:37 executing program 4: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000005000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:37 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:37 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a004800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1067.925340][ T2170] loop3: p2 size 1073741824 extends beyond EOD, truncated [ 1068.312349][ T2170] loop3: p3 start 225 is beyond EOD, truncated [ 1068.763935][ T2170] loop3: p4 size 3657465856 extends beyond EOD, truncated 01:56:39 executing program 0: gettid() r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r0, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r1, r0, 0x0) tkill(0x0, 0x401004000000016) 01:56:39 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a004c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:39 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000063000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:40 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:40 executing program 4: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff0700000000000005000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:42 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a004c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:42 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a005c00ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:42 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000000ffffff81000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:42 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x0) 01:56:43 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000600ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1074.312889][ T2762] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 01:56:46 executing program 0: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='.3.-/\x00', 0x0) read(r1, &(0x7f0000000400)=""/4093, 0xd6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x0) 01:56:46 executing program 5: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff0a000000ff07000000ffffff82000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:46 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a006000ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:46 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a005500ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1078.559776][ T2762] loop4: p4 size 3657465856 extends beyond EOD, truncated 01:56:48 executing program 3: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201630000000a000700ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) 01:56:49 executing program 2: syz_read_part_table(0x0, 0xaaaaaaaaaaaac47, &(0x7f0000000080)=[{&(0x7f0000000000)="0201050000000a006800ff07000000ffffffbf000800000000000000004000ffffff85000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) [ 1093.774729][ T1953] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1093.877343][ T1953] CPU: 1 PID: 1953 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1093.884409][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.894463][ T1953] Call Trace: [ 1093.897757][ T1953] dump_stack+0x1fb/0x318 [ 1093.902084][ T1953] dump_header+0xd8/0x960 [ 1093.906414][ T1953] oom_kill_process+0xcd/0x350 [ 1093.911171][ T1953] out_of_memory+0x5fa/0x8b0 [ 1093.915760][ T1953] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1093.921328][ T1953] __alloc_pages_nodemask+0x39a/0x5d0 [ 1093.926706][ T1953] alloc_pages_vma+0x4f7/0xd50 [ 1093.931471][ T1953] handle_mm_fault+0x30af/0x5ff0 [ 1093.936421][ T1953] do_user_addr_fault+0x589/0xaf0 [ 1093.941458][ T1953] __do_page_fault+0xd3/0x1f0 [ 1093.946123][ T1953] do_page_fault+0x99/0xb0 [ 1093.950540][ T1953] page_fault+0x39/0x40 [ 1093.954669][ T1953] RIP: 0033:0x7f609a310c0e [ 1093.959069][ T1953] Code: Bad RIP value. [ 1093.963106][ T1953] RSP: 002b:00007ffcf3d2eac0 EFLAGS: 00010246 [ 1093.969143][ T1953] RAX: 0000000000000000 RBX: 00007f609879ff10 RCX: 0000000000000002 [ 1093.977120][ T1953] RDX: 00000000000290e0 RSI: 00000000000290e0 RDI: 00007f60987a0000 [ 1093.985106][ T1953] RBP: 00000000016faeb0 R08: 0000000000000000 R09: 00000000016fb116 [ 1093.993089][ T1953] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1094.001044][ T1953] R13: 00000000000007ff R14: 00000000016fb320 R15: 00000000016fb0e6 [ 1094.172844][ T1953] Mem-Info: [ 1094.176023][ T1953] active_anon:1383050 inactive_anon:493 isolated_anon:0 [ 1094.176023][ T1953] active_file:185 inactive_file:114 isolated_file:19 [ 1094.176023][ T1953] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1094.176023][ T1953] slab_reclaimable:13731 slab_unreclaimable:99250 [ 1094.176023][ T1953] mapped:52234 shmem:633 pagetables:10690 bounce:0 [ 1094.176023][ T1953] free:24977 free_pcp:0 free_cma:0 [ 1094.216429][ T1953] Node 0 active_anon:1840624kB inactive_anon:1968kB active_file:740kB inactive_file:444kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:208936kB dirty:24kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 432128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1094.249242][ T1953] Node 1 active_anon:3691576kB inactive_anon:4kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1094.298844][ T1953] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.326134][ T1953] lowmem_reserve[]: 0 2567 2568 2568 [ 1094.453080][ T1953] Node 0 DMA32 free:36664kB min:36352kB low:45440kB high:54528kB active_anon:1834548kB inactive_anon:1968kB active_file:204kB inactive_file:176kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14496kB pagetables:22820kB bounce:0kB free_pcp:832kB local_pcp:484kB free_cma:0kB [ 1095.316853][ T1953] lowmem_reserve[]: 0 0 1 1 [ 1095.378895][ T1953] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1095.455442][ T1953] lowmem_reserve[]: 0 0 0 0 [ 1095.544425][ T1953] Node 1 Normal free:53464kB min:53516kB low:66892kB high:80268kB active_anon:3691576kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19820kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1095.855293][ T1953] lowmem_reserve[]: 0 0 0 0 [ 1095.863233][ T1953] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1095.895424][ T1953] Node 0 DMA32: 209*4kB (UME) 1733*8kB (UMEH) 47*16kB (UM) 3*32kB (UM) 3*64kB (UM) 9*128kB (UE) 9*256kB (ME) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 3*4096kB (M) = 36604kB [ 1095.975936][ T1953] Node 0 Normal: 2*4kB (M) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1096.012441][ T1953] Node 1 Normal: 318*4kB (UME) 42*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53464kB [ 1096.029922][ T1953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1096.040858][ T1953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1096.482730][ T1953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.082500][ T1953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.634043][ T1953] 760 total pagecache pages [ 1097.646502][ T1953] 0 pages in swap cache [ 1097.666075][ T1953] Swap cache stats: add 0, delete 0, find 0/0 [ 1097.683275][ T1953] Free swap = 0kB [ 1097.687027][ T1953] Total swap = 0kB [ 1097.714665][ T1953] 1965979 pages RAM [ 1097.725608][ T1953] 0 pages HighMem/MovableOnly [ 1097.742314][ T1953] 336047 pages reserved [ 1097.746490][ T1953] 0 pages cma reserved [ 1097.776189][ T1953] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=10605,uid=0 [ 1097.813049][ T1953] Out of memory: Killed process 10605 (syz-executor.1) total-vm:138388kB, anon-rss:4292kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1098.715561][ T2111] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1098.775256][ T2111] CPU: 0 PID: 2111 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1098.782422][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.792488][ T2111] Call Trace: [ 1098.795796][ T2111] dump_stack+0x1fb/0x318 [ 1098.800138][ T2111] dump_header+0xd8/0x960 [ 1098.804477][ T2111] oom_kill_process+0xcd/0x350 [ 1098.809252][ T2111] out_of_memory+0x5fa/0x8b0 [ 1098.813849][ T2111] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1098.819516][ T2111] __alloc_pages_nodemask+0x39a/0x5d0 [ 1098.824898][ T2111] alloc_pages_vma+0x4f7/0xd50 [ 1098.829669][ T2111] handle_mm_fault+0x30af/0x5ff0 [ 1098.834725][ T2111] do_user_addr_fault+0x589/0xaf0 [ 1098.839774][ T2111] __do_page_fault+0xd3/0x1f0 [ 1098.844626][ T2111] do_page_fault+0x99/0xb0 [ 1098.849131][ T2111] page_fault+0x39/0x40 [ 1098.853400][ T2111] RIP: 0033:0x7f843e1e2c0e [ 1098.857862][ T2111] Code: Bad RIP value. [ 1098.861924][ T2111] RSP: 002b:00007fff09a23130 EFLAGS: 00010246 [ 1098.867988][ T2111] RAX: 0000000000000000 RBX: 00007f843c112f10 RCX: 0000000000000002 [ 1098.876070][ T2111] RDX: 0000000000023af0 RSI: 0000000000023b00 RDI: 00007f843c113000 [ 1098.884040][ T2111] RBP: 00000000021d6eb0 R08: 0000000000000000 R09: 00000000021d7116 [ 1098.892292][ T2111] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1098.900465][ T2111] R13: 00000000000007ff R14: 00000000021d7320 R15: 00000000021d70e6 [ 1099.007659][ T2111] Mem-Info: [ 1099.011017][ T2111] active_anon:1384144 inactive_anon:493 isolated_anon:0 [ 1099.011017][ T2111] active_file:3 inactive_file:0 isolated_file:16 [ 1099.011017][ T2111] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1099.011017][ T2111] slab_reclaimable:13694 slab_unreclaimable:98508 [ 1099.011017][ T2111] mapped:52260 shmem:633 pagetables:10658 bounce:0 [ 1099.011017][ T2111] free:24943 free_pcp:59 free_cma:0 [ 1099.620198][ T2111] Node 0 active_anon:1845032kB inactive_anon:1968kB active_file:8kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:208964kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 428032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1099.806936][ T2111] Node 1 active_anon:3691576kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1099.879225][ T2111] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1100.115009][ T2111] lowmem_reserve[]: 0 2567 2568 2568 [ 1100.129193][ T2111] Node 0 DMA32 free:36356kB min:36352kB low:45440kB high:54528kB active_anon:1838856kB inactive_anon:1968kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14464kB pagetables:22736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1100.701791][ T2111] lowmem_reserve[]: 0 0 1 1 [ 1100.706362][ T2111] Node 0 Normal free:12kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1100.834188][ T2111] lowmem_reserve[]: 0 0 0 0 [ 1100.838983][ T2111] Node 1 Normal free:53504kB min:53516kB low:66892kB high:80268kB active_anon:3691576kB inactive_anon:4kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1100.883025][ T2111] lowmem_reserve[]: 0 0 0 0 [ 1100.899873][ T2111] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1100.937199][ T2111] Node 0 DMA32: 282*4kB (UME) 1868*8kB (UEH) 55*16kB (UM) 2*32kB (U) 1*64kB (U) 9*128kB (UE) 8*256kB (E) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 3*4096kB (M) = 36152kB [ 1100.985006][ T2111] Node 0 Normal: 3*4kB (UM) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1101.000729][ T2111] Node 1 Normal: 324*4kB (UME) 44*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53504kB [ 1101.054679][ T2111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.075313][ T2111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.084684][ T2111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.094443][ T2111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.103853][ T2111] 700 total pagecache pages [ 1101.116160][ T2111] 0 pages in swap cache [ 1101.156514][ T2111] Swap cache stats: add 0, delete 0, find 0/0 [ 1101.244321][ T2111] Free swap = 0kB [ 1101.252449][ T2111] Total swap = 0kB [ 1101.256200][ T2111] 1965979 pages RAM [ 1101.294752][ T2111] 0 pages HighMem/MovableOnly [ 1101.326703][ T2111] 336047 pages reserved [ 1101.334019][ T2111] 0 pages cma reserved [ 1101.343423][ T2111] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=30021,uid=0 [ 1101.776398][ T2111] Out of memory: Killed process 30021 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1102.120640][ T2646] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1102.133502][ T2646] CPU: 0 PID: 2646 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1102.140541][ T2646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.150939][ T2646] Call Trace: [ 1102.154234][ T2646] dump_stack+0x1fb/0x318 [ 1102.158575][ T2646] dump_header+0xd8/0x960 [ 1102.162914][ T2646] oom_kill_process+0xcd/0x350 [ 1102.167892][ T2646] out_of_memory+0x5fa/0x8b0 [ 1102.172496][ T2646] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1102.178249][ T2646] __alloc_pages_nodemask+0x39a/0x5d0 [ 1102.183979][ T2646] alloc_pages_vma+0x4f7/0xd50 [ 1102.188761][ T2646] handle_mm_fault+0x30af/0x5ff0 [ 1102.193779][ T2646] do_user_addr_fault+0x589/0xaf0 [ 1102.198940][ T2646] __do_page_fault+0xd3/0x1f0 [ 1102.203629][ T2646] do_page_fault+0x99/0xb0 [ 1102.208254][ T2646] page_fault+0x39/0x40 [ 1102.212412][ T2646] RIP: 0033:0x7f7da1addc0e [ 1102.216850][ T2646] Code: Bad RIP value. [ 1102.221001][ T2646] RSP: 002b:00007ffecd29a610 EFLAGS: 00010246 [ 1102.227141][ T2646] RAX: 0000000000000000 RBX: 00007f7da0f3af10 RCX: 0000000000000002 [ 1102.235284][ T2646] RDX: 0000000000019710 RSI: 0000000000019720 RDI: 00007f7da0f3b000 [ 1102.243254][ T2646] RBP: 000000000072feb0 R08: 0000000000000000 R09: 0000000000730116 [ 1102.251309][ T2646] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1102.259459][ T2646] R13: 00000000000007ff R14: 0000000000730320 R15: 00000000007300e6 [ 1102.311840][ T2646] Mem-Info: [ 1102.315187][ T2646] active_anon:1383990 inactive_anon:493 isolated_anon:0 [ 1102.315187][ T2646] active_file:60 inactive_file:88 isolated_file:28 [ 1102.315187][ T2646] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1102.315187][ T2646] slab_reclaimable:13684 slab_unreclaimable:98438 [ 1102.315187][ T2646] mapped:52276 shmem:633 pagetables:10622 bounce:0 [ 1102.315187][ T2646] free:24984 free_pcp:269 free_cma:0 [ 1102.356233][ T2646] Node 0 active_anon:1844384kB inactive_anon:1968kB active_file:240kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:209104kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 428032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1102.385481][ T2646] Node 1 active_anon:3691576kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1102.426717][ T2646] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1102.459606][ T2646] lowmem_reserve[]: 0 2567 2568 2568 [ 1102.465219][ T2646] Node 0 DMA32 free:35956kB min:36352kB low:45440kB high:54528kB active_anon:1838256kB inactive_anon:1968kB active_file:152kB inactive_file:400kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14432kB pagetables:22624kB bounce:0kB free_pcp:1056kB local_pcp:464kB free_cma:0kB [ 1102.514720][ T2646] lowmem_reserve[]: 0 0 1 1 [ 1102.524902][ T2646] Node 0 Normal free:12kB min:2064kB low:2068kB high:2072kB active_anon:1336kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1102.581191][ T2646] lowmem_reserve[]: 0 0 0 0 [ 1102.585906][ T2646] Node 1 Normal free:53504kB min:53516kB low:66892kB high:80268kB active_anon:3691576kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19752kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1102.615411][ T2646] lowmem_reserve[]: 0 0 0 0 [ 1102.621381][ T2646] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1102.640188][ T2646] Node 0 DMA32: 155*4kB (UE) 1873*8kB (UEH) 55*16kB (UM) 3*32kB (U) 2*64kB (UM) 9*128kB (UE) 9*256kB (ME) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 3*4096kB (M) = 36036kB [ 1102.665163][ T2646] Node 0 Normal: 3*4kB (UM) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1102.682996][ T2646] Node 1 Normal: 324*4kB (UME) 44*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53504kB [ 1102.748304][ T2646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1102.792846][ T2646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1102.817971][ T2646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1102.886367][ T2646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1102.925596][ T2646] 703 total pagecache pages [ 1102.930178][ T2646] 0 pages in swap cache [ 1102.934333][ T2646] Swap cache stats: add 0, delete 0, find 0/0 [ 1102.946103][ T2646] Free swap = 0kB [ 1102.956829][ T2646] Total swap = 0kB [ 1102.965996][ T2646] 1965979 pages RAM [ 1103.283096][ T2646] 0 pages HighMem/MovableOnly [ 1103.299710][ T2646] 336047 pages reserved [ 1103.303891][ T2646] 0 pages cma reserved [ 1103.526651][ T2646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=20032,uid=0 [ 1103.591691][ T2646] Out of memory: Killed process 20032 (syz-executor.4) total-vm:138388kB, anon-rss:4288kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1105.018206][ T3318] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1106.021079][ T3318] CPU: 1 PID: 3318 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1106.028147][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.038196][ T3318] Call Trace: [ 1106.041489][ T3318] dump_stack+0x1fb/0x318 [ 1106.045821][ T3318] dump_header+0xd8/0x960 [ 1106.050150][ T3318] oom_kill_process+0xcd/0x350 [ 1106.054908][ T3318] out_of_memory+0x5fa/0x8b0 [ 1106.059506][ T3318] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1106.065163][ T3318] __alloc_pages_nodemask+0x39a/0x5d0 [ 1106.070536][ T3318] alloc_pages_vma+0x4f7/0xd50 [ 1106.075300][ T3318] handle_mm_fault+0x30af/0x5ff0 [ 1106.080251][ T3318] do_user_addr_fault+0x589/0xaf0 [ 1106.085282][ T3318] __do_page_fault+0xd3/0x1f0 [ 1106.089953][ T3318] do_page_fault+0x99/0xb0 [ 1106.094367][ T3318] page_fault+0x39/0x40 [ 1106.098521][ T3318] RIP: 0033:0x7f1bfddcbc0e [ 1106.102936][ T3318] Code: Bad RIP value. [ 1106.106990][ T3318] RSP: 002b:00007ffd65847f50 EFLAGS: 00010246 [ 1106.113045][ T3318] RAX: 0000000000000000 RBX: 00007f1bfd6daf10 RCX: 0000000000000002 [ 1106.121005][ T3318] RDX: 0000000000006930 RSI: 0000000000006940 RDI: 00007f1bfd6db000 [ 1106.128968][ T3318] RBP: 0000000002082eb0 R08: 0000000000000000 R09: 0000000002083116 [ 1106.136927][ T3318] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1106.144889][ T3318] R13: 00000000000007ff R14: 0000000002083320 R15: 00000000020830e6 [ 1106.247975][ T3318] Mem-Info: [ 1106.251161][ T3318] active_anon:1384276 inactive_anon:493 isolated_anon:0 [ 1106.251161][ T3318] active_file:42 inactive_file:17 isolated_file:12 [ 1106.251161][ T3318] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1106.251161][ T3318] slab_reclaimable:13686 slab_unreclaimable:98422 [ 1106.251161][ T3318] mapped:52226 shmem:633 pagetables:10605 bounce:0 [ 1106.251161][ T3318] free:25054 free_pcp:0 free_cma:0 [ 1106.307179][ T3318] Node 0 active_anon:1845520kB inactive_anon:1968kB active_file:168kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:208904kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 419840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1106.876260][ T3318] Node 1 active_anon:3691584kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1107.213747][ T3318] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.285144][ T3318] lowmem_reserve[]: 0 2567 2568 2568 [ 1107.294345][ T3318] Node 0 DMA32 free:36100kB min:36352kB low:45440kB high:54528kB active_anon:1839372kB inactive_anon:1968kB active_file:0kB inactive_file:456kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14400kB pagetables:22552kB bounce:0kB free_pcp:744kB local_pcp:140kB free_cma:0kB [ 1107.349994][ T3318] lowmem_reserve[]: 0 0 1 1 [ 1107.354545][ T3318] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.394314][ T3318] lowmem_reserve[]: 0 0 0 0 [ 1107.441106][ T3318] Node 1 Normal free:53468kB min:53516kB low:66892kB high:80268kB active_anon:3691584kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.482075][ T3318] lowmem_reserve[]: 0 0 0 0 [ 1107.486617][ T3318] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1107.964490][ T3318] Node 0 DMA32: 247*4kB (UME) 1884*8kB (UMEH) 55*16kB (U) 4*32kB (U) 2*64kB (UM) 9*128kB (UE) 9*256kB (ME) 1*512kB (U) 2*1024kB (UM) 2*2048kB (ME) 2*4096kB (M) = 35500kB [ 1108.893011][ T3318] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1108.905540][ T3318] Node 1 Normal: 325*4kB (UME) 45*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53516kB [ 1109.490637][ T3318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1109.592442][ T3318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1109.607281][ T3318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1109.619767][ T3318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1109.630376][ T3318] 734 total pagecache pages [ 1109.634874][ T3318] 0 pages in swap cache [ 1109.640491][ T3318] Swap cache stats: add 0, delete 0, find 0/0 [ 1109.646543][ T3318] Free swap = 0kB [ 1109.666508][ T3318] Total swap = 0kB [ 1109.706332][ T3318] 1965979 pages RAM [ 1109.723622][ T3318] 0 pages HighMem/MovableOnly [ 1109.733012][ T3318] 336047 pages reserved [ 1109.737173][ T3318] 0 pages cma reserved [ 1109.772095][ T3318] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=11587,uid=0 [ 1109.796627][ T3318] Out of memory: Killed process 11587 (syz-executor.1) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1110.513972][ T3403] udevd invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=-1000 [ 1110.794730][ T3403] CPU: 0 PID: 3403 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1110.801808][ T3403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.811863][ T3403] Call Trace: [ 1110.815163][ T3403] dump_stack+0x1fb/0x318 [ 1110.819505][ T3403] dump_header+0xd8/0x960 [ 1110.823836][ T3403] oom_kill_process+0xcd/0x350 [ 1110.828599][ T3403] out_of_memory+0x5fa/0x8b0 [ 1110.833181][ T3403] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1110.838756][ T3403] __alloc_pages_nodemask+0x39a/0x5d0 [ 1110.844125][ T3403] kmem_getpages+0x4d/0xa00 [ 1110.848625][ T3403] cache_grow_begin+0x7e/0x2c0 [ 1110.853381][ T3403] ? __cpuset_node_allowed+0x195/0x510 [ 1110.858837][ T3403] fallback_alloc+0x134/0x1c0 [ 1110.863509][ T3403] ____cache_alloc_node+0x22a/0x250 [ 1110.868705][ T3403] kmem_cache_alloc_node+0x1cc/0x280 [ 1110.873979][ T3403] ? copy_process+0x501/0x5970 [ 1110.878745][ T3403] copy_process+0x501/0x5970 [ 1110.883427][ T3403] ? rcu_lock_release+0xd/0x30 [ 1110.888205][ T3403] _do_fork+0x13f/0x5b0 [ 1110.892356][ T3403] ? debug_smp_processor_id+0x1c/0x20 [ 1110.897720][ T3403] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1110.903792][ T3403] __x64_sys_clone+0x1ec/0x230 [ 1110.908583][ T3403] do_syscall_64+0xf7/0x1c0 [ 1110.913086][ T3403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.923053][ T3403] RIP: 0033:0x7f84ae0c1f46 [ 1110.927470][ T3403] Code: Bad RIP value. [ 1110.931526][ T3403] RSP: 002b:00007fff4b18c8b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1110.939952][ T3403] RAX: ffffffffffffffda RBX: 00007fff4b18c8b0 RCX: 00007f84ae0c1f46 [ 1110.947916][ T3403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1110.955876][ T3403] RBP: 00007fff4b18c910 R08: 0000000000000d4b R09: 0000000000000d4b [ 1110.963836][ T3403] R10: 00007f84ae9dea70 R11: 0000000000000246 R12: 0000000000000000 [ 1110.971799][ T3403] R13: 00007fff4b18c8d0 R14: 0000000000000005 R15: 0000000000000005 [ 1111.498481][ T3403] Mem-Info: [ 1111.501664][ T3403] active_anon:1384517 inactive_anon:493 isolated_anon:0 [ 1111.501664][ T3403] active_file:26 inactive_file:31 isolated_file:32 [ 1111.501664][ T3403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1111.501664][ T3403] slab_reclaimable:13676 slab_unreclaimable:98388 [ 1111.501664][ T3403] mapped:52237 shmem:633 pagetables:10581 bounce:0 [ 1111.501664][ T3403] free:24930 free_pcp:74 free_cma:0 [ 1111.650336][ T3403] Node 0 active_anon:1846568kB inactive_anon:1968kB active_file:36kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:209012kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 415744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1112.119054][ T3403] Node 1 active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1112.171389][ T3403] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.316904][ T3403] lowmem_reserve[]: 0 2567 2568 2568 [ 1112.650437][ T3403] Node 0 DMA32 free:36200kB min:36352kB low:45440kB high:54528kB active_anon:1840392kB inactive_anon:1968kB active_file:44kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14368kB pagetables:22448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.423143][ T3403] lowmem_reserve[]: 0 0 1 1 [ 1113.428396][ T3403] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.461835][ T3403] lowmem_reserve[]: 0 0 0 0 [ 1113.466366][ T3403] Node 1 Normal free:53516kB min:53516kB low:66892kB high:80268kB active_anon:3691588kB inactive_anon:4kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.740171][ T3403] lowmem_reserve[]: 0 0 0 0 [ 1113.744726][ T3403] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1114.533452][ T3403] Node 0 DMA32: 436*4kB (UME) 1904*8kB (UMEH) 58*16kB (UM) 8*32kB (UM) 1*64kB (U) 9*128kB (UE) 8*256kB (E) 1*512kB (U) 2*1024kB (UM) 2*2048kB (ME) 2*4096kB (M) = 36272kB [ 1114.596016][ T3403] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1114.608260][ T3403] Node 1 Normal: 325*4kB (UME) 45*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53516kB [ 1114.625638][ T3403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.636037][ T3403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.653033][ T3403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.662622][ T3403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.675319][ T3403] 664 total pagecache pages [ 1114.683377][ T3403] 0 pages in swap cache [ 1114.720867][ T3403] Swap cache stats: add 0, delete 0, find 0/0 [ 1114.726963][ T3403] Free swap = 0kB [ 1114.732286][ T3403] Total swap = 0kB [ 1114.736001][ T3403] 1965979 pages RAM [ 1114.747084][ T3403] 0 pages HighMem/MovableOnly [ 1114.751967][ T3403] 336047 pages reserved [ 1114.756109][ T3403] 0 pages cma reserved [ 1114.761423][ T3403] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=11551,uid=0 [ 1114.788029][ T3403] Out of memory: Killed process 11551 (syz-executor.1) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1115.889791][ T3905] udevd invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=-1000 [ 1115.901500][ T3905] CPU: 1 PID: 3905 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1115.908511][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.918567][ T3905] Call Trace: [ 1115.921837][ T3905] dump_stack+0x1fb/0x318 [ 1115.926151][ T3905] dump_header+0xd8/0x960 [ 1115.930542][ T3905] oom_kill_process+0xcd/0x350 [ 1115.935315][ T3905] out_of_memory+0x5fa/0x8b0 [ 1115.939882][ T3905] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1115.945422][ T3905] __alloc_pages_nodemask+0x39a/0x5d0 [ 1115.950768][ T3905] copy_process+0x590/0x5970 [ 1115.955330][ T3905] ? release_sock+0x179/0x1d0 [ 1115.959986][ T3905] ? __local_bh_enable_ip+0x13a/0x240 [ 1115.965330][ T3905] ? release_sock+0x179/0x1d0 [ 1115.969989][ T3905] ? trace_hardirqs_on+0x74/0x80 [ 1115.974896][ T3905] ? __local_bh_enable_ip+0x13a/0x240 [ 1115.980244][ T3905] ? release_sock+0x179/0x1d0 [ 1115.984944][ T3905] _do_fork+0x13f/0x5b0 [ 1115.989075][ T3905] ? debug_smp_processor_id+0x1c/0x20 [ 1115.994420][ T3905] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1116.000459][ T3905] __x64_sys_clone+0x1ec/0x230 [ 1116.005197][ T3905] do_syscall_64+0xf7/0x1c0 [ 1116.009687][ T3905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1116.015548][ T3905] RIP: 0033:0x7f84ae0c1f46 [ 1116.019947][ T3905] Code: Bad RIP value. [ 1116.023983][ T3905] RSP: 002b:00007fff4b194020 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1116.032365][ T3905] RAX: ffffffffffffffda RBX: 00007fff4b194020 RCX: 00007f84ae0c1f46 [ 1116.040310][ T3905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1116.048252][ T3905] RBP: 00007fff4b194080 R08: 0000000000000f41 R09: 0000000000000f41 [ 1116.056192][ T3905] R10: 00007f84ae9dea70 R11: 0000000000000246 R12: 0000000000000000 [ 1116.064133][ T3905] R13: 00007fff4b194040 R14: 0000000002034250 R15: 00000000000103c2 [ 1116.086595][ T3905] Mem-Info: [ 1116.089873][ T3905] active_anon:1384362 inactive_anon:493 isolated_anon:0 [ 1116.089873][ T3905] active_file:16 inactive_file:119 isolated_file:35 [ 1116.089873][ T3905] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1116.089873][ T3905] slab_reclaimable:13677 slab_unreclaimable:98367 [ 1116.089873][ T3905] mapped:52294 shmem:633 pagetables:10553 bounce:0 [ 1116.089873][ T3905] free:25048 free_pcp:0 free_cma:0 [ 1116.127413][ T3905] Node 0 active_anon:1845860kB inactive_anon:1968kB active_file:64kB inactive_file:472kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:209176kB dirty:16kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 411648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.156305][ T3905] Node 1 active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.183434][ T3905] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.213586][ T3905] lowmem_reserve[]: 0 2567 2568 2568 [ 1116.229182][ T3905] Node 0 DMA32 free:36692kB min:36352kB low:45440kB high:54528kB active_anon:1839776kB inactive_anon:1968kB active_file:100kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14336kB pagetables:22336kB bounce:0kB free_pcp:160kB local_pcp:144kB free_cma:0kB [ 1116.292055][ T3905] lowmem_reserve[]: 0 0 1 1 [ 1116.296640][ T3905] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.371970][ T3905] lowmem_reserve[]: 0 0 0 0 [ 1116.376523][ T3905] Node 1 Normal free:53516kB min:53516kB low:66892kB high:80268kB active_anon:3691588kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.425761][ T3905] lowmem_reserve[]: 0 0 0 0 [ 1116.430397][ T3905] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1116.446639][ T3905] Node 0 DMA32: 478*4kB (UME) 1903*8kB (UMEH) 61*16kB (UM) 9*32kB (UM) 1*64kB (U) 9*128kB (UE) 9*256kB (ME) 1*512kB (U) 2*1024kB (UM) 2*2048kB (ME) 2*4096kB (M) = 36768kB [ 1116.961023][ T3905] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1117.206399][ T3905] Node 1 Normal: 325*4kB (UME) 45*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53516kB [ 1117.299928][ T3905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.324224][ T3905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.364513][ T3905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.837260][ T3905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.854902][ T3905] 652 total pagecache pages [ 1118.862183][ T3905] 0 pages in swap cache [ 1118.866333][ T3905] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.918117][ T3905] Free swap = 0kB [ 1118.921874][ T3905] Total swap = 0kB [ 1118.930150][ T3905] 1965979 pages RAM [ 1118.934012][ T3905] 0 pages HighMem/MovableOnly [ 1118.939385][ T3905] 336047 pages reserved [ 1118.943542][ T3905] 0 pages cma reserved [ 1118.948255][ T3905] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=3553,uid=0 [ 1118.963451][ T3905] Out of memory: Killed process 3553 (syz-executor.0) total-vm:138256kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1119.135160][ T3403] udevd invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=-1000 [ 1119.185387][ T3403] CPU: 0 PID: 3403 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1119.192466][ T3403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.202521][ T3403] Call Trace: [ 1119.205816][ T3403] dump_stack+0x1fb/0x318 [ 1119.210158][ T3403] dump_header+0xd8/0x960 [ 1119.214486][ T3403] oom_kill_process+0xcd/0x350 [ 1119.219251][ T3403] out_of_memory+0x5fa/0x8b0 [ 1119.223837][ T3403] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1119.229407][ T3403] __alloc_pages_nodemask+0x39a/0x5d0 [ 1119.234872][ T3403] kmem_getpages+0x4d/0xa00 [ 1119.239512][ T3403] cache_grow_begin+0x7e/0x2c0 [ 1119.244277][ T3403] ? __cpuset_node_allowed+0x195/0x510 [ 1119.249733][ T3403] fallback_alloc+0x134/0x1c0 [ 1119.254405][ T3403] ____cache_alloc_node+0x22a/0x250 [ 1119.259599][ T3403] kmem_cache_alloc_node+0x1cc/0x280 [ 1119.264873][ T3403] ? copy_process+0x501/0x5970 [ 1119.269640][ T3403] copy_process+0x501/0x5970 [ 1119.274234][ T3403] ? rcu_lock_release+0xd/0x30 [ 1119.279006][ T3403] _do_fork+0x13f/0x5b0 [ 1119.283156][ T3403] ? debug_smp_processor_id+0x1c/0x20 [ 1119.288523][ T3403] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1119.294585][ T3403] __x64_sys_clone+0x1ec/0x230 [ 1119.299343][ T3403] do_syscall_64+0xf7/0x1c0 [ 1119.303822][ T3403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1119.309688][ T3403] RIP: 0033:0x7f84ae0c1f46 [ 1119.314091][ T3403] Code: Bad RIP value. [ 1119.318129][ T3403] RSP: 002b:00007fff4b18c8b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1119.326508][ T3403] RAX: ffffffffffffffda RBX: 00007fff4b18c8b0 RCX: 00007f84ae0c1f46 [ 1119.334455][ T3403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1119.342446][ T3403] RBP: 00007fff4b18c910 R08: 0000000000000d4b R09: 0000000000000d4b [ 1119.350388][ T3403] R10: 00007f84ae9dea70 R11: 0000000000000246 R12: 0000000000000000 [ 1119.358338][ T3403] R13: 00007fff4b18c8d0 R14: 0000000000000005 R15: 0000000000000005 [ 1119.395176][ T3403] Mem-Info: [ 1119.398429][ T3403] active_anon:1384354 inactive_anon:493 isolated_anon:0 [ 1119.398429][ T3403] active_file:38 inactive_file:28 isolated_file:21 [ 1119.398429][ T3403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1119.398429][ T3403] slab_reclaimable:13677 slab_unreclaimable:98372 [ 1119.398429][ T3403] mapped:52251 shmem:633 pagetables:10553 bounce:0 [ 1119.398429][ T3403] free:24943 free_pcp:221 free_cma:0 [ 1119.436082][ T3403] Node 0 active_anon:1845828kB inactive_anon:1968kB active_file:148kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:209004kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 411648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1119.464978][ T3403] Node 1 active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1119.794364][ T3403] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.298857][ T3403] lowmem_reserve[]: 0 2567 2568 2568 [ 1120.304207][ T3403] Node 0 DMA32 free:36144kB min:36352kB low:45440kB high:54528kB active_anon:1839788kB inactive_anon:1968kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14336kB pagetables:22280kB bounce:0kB free_pcp:404kB local_pcp:248kB free_cma:0kB [ 1120.365398][ T3403] lowmem_reserve[]: 0 0 1 1 [ 1120.373596][ T3403] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.415524][ T3403] lowmem_reserve[]: 0 0 0 0 [ 1120.420899][ T3403] Node 1 Normal free:53516kB min:53516kB low:66892kB high:80268kB active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.453225][ T3403] lowmem_reserve[]: 0 0 0 0 [ 1120.484632][ T3403] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1120.503157][ T3403] Node 0 DMA32: 464*4kB (UME) 1900*8kB (UEH) 57*16kB (UM) 8*32kB (UM) 2*64kB (UM) 9*128kB (UE) 9*256kB (ME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 2*4096kB (M) = 36144kB [ 1120.522948][ T3403] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1120.557039][ T3403] Node 1 Normal: 325*4kB (UME) 45*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53516kB [ 1120.678922][ T3403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1120.711418][ T3403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.023620][ T3403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.033894][ T3403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.052788][ T3403] 667 total pagecache pages [ 1121.057319][ T3403] 0 pages in swap cache [ 1121.085850][ T3403] Swap cache stats: add 0, delete 0, find 0/0 [ 1121.435251][ T3403] Free swap = 0kB [ 1121.440890][ T3403] Total swap = 0kB [ 1121.444617][ T3403] 1965979 pages RAM [ 1121.452312][ T3403] 0 pages HighMem/MovableOnly [ 1121.456983][ T3403] 336047 pages reserved [ 1121.834407][ T3403] 0 pages cma reserved [ 1122.028210][ T3403] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=32626,uid=0 [ 1122.727638][ T3403] Out of memory: Killed process 32626 (syz-executor.0) total-vm:138256kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1122.754330][ T1071] oom_reaper: reaped process 32626 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1123.240127][ T19] kdevtmpfs invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 1123.412728][ T19] CPU: 1 PID: 19 Comm: kdevtmpfs Not tainted 5.4.0-rc7+ #0 [ 1123.419968][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.430091][ T19] Call Trace: [ 1123.433382][ T19] dump_stack+0x1fb/0x318 [ 1123.437722][ T19] dump_header+0xd8/0x960 [ 1123.442050][ T19] oom_kill_process+0xcd/0x350 [ 1123.446811][ T19] out_of_memory+0x5fa/0x8b0 [ 1123.451402][ T19] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1123.456971][ T19] __alloc_pages_nodemask+0x39a/0x5d0 [ 1123.462346][ T19] kmem_getpages+0x4d/0xa00 [ 1123.466841][ T19] cache_grow_begin+0x7e/0x2c0 [ 1123.471597][ T19] ? __cpuset_node_allowed+0x195/0x510 [ 1123.477056][ T19] fallback_alloc+0x134/0x1c0 [ 1123.481729][ T19] ____cache_alloc_node+0x22a/0x250 [ 1123.486927][ T19] kmem_cache_alloc+0x163/0x2e0 [ 1123.491767][ T19] ? getname_kernel+0x59/0x2f0 [ 1123.496523][ T19] getname_kernel+0x59/0x2f0 [ 1123.501104][ T19] kern_path_create+0x24/0x40 [ 1123.505773][ T19] devtmpfsd+0x2d9/0x1140 [ 1123.510124][ T19] kthread+0x332/0x350 [ 1123.514183][ T19] ? devtmpfs_mount+0xb0/0xb0 [ 1123.518854][ T19] ? kthread_blkcg+0xe0/0xe0 [ 1123.523437][ T19] ret_from_fork+0x24/0x30 [ 1124.144149][ T19] Mem-Info: [ 1124.148461][ T19] active_anon:1384532 inactive_anon:493 isolated_anon:0 [ 1124.148461][ T19] active_file:17 inactive_file:11 isolated_file:4 [ 1124.148461][ T19] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1124.148461][ T19] slab_reclaimable:13679 slab_unreclaimable:98359 [ 1124.148461][ T19] mapped:52226 shmem:633 pagetables:10527 bounce:0 [ 1124.148461][ T19] free:25083 free_pcp:0 free_cma:0 [ 1124.302164][ T19] Node 0 active_anon:1846540kB inactive_anon:1968kB active_file:60kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:208904kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 403456kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1124.777148][ T19] Node 1 active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1125.026081][ T19] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.137111][ T19] lowmem_reserve[]: 0 2567 2568 2568 [ 1125.182880][ T19] Node 0 DMA32 free:36112kB min:36352kB low:45440kB high:54528kB active_anon:1840364kB inactive_anon:1968kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14336kB pagetables:22232kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1125.268971][ T19] lowmem_reserve[]: 0 0 1 1 [ 1125.273526][ T19] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.303820][ T19] lowmem_reserve[]: 0 0 0 0 [ 1125.316633][ T19] Node 1 Normal free:53516kB min:53516kB low:66892kB high:80268kB active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.365277][ T19] lowmem_reserve[]: 0 0 0 0 [ 1125.396222][ T19] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1125.422702][ T19] Node 0 DMA32: 474*4kB (UME) 1901*8kB (UMEH) 56*16kB (U) 8*32kB (UM) 1*64kB (U) 9*128kB (UE) 9*256kB (ME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 2*4096kB (M) = 36112kB [ 1125.447829][ T19] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1125.460438][ T19] Node 1 Normal: 325*4kB (UME) 45*8kB (UME) 11*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53516kB [ 1126.357216][ T19] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.413356][ T19] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1126.425934][ T19] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.489747][ T19] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1126.585788][ T19] 656 total pagecache pages [ 1127.795664][ T19] 0 pages in swap cache [ 1127.935702][ T19] Swap cache stats: add 0, delete 0, find 0/0 [ 1127.961719][ T19] Free swap = 0kB [ 1127.965559][ T19] Total swap = 0kB [ 1127.984067][ T19] 1965979 pages RAM [ 1128.003524][ T19] 0 pages HighMem/MovableOnly [ 1128.060132][ T19] 336047 pages reserved [ 1128.064313][ T19] 0 pages cma reserved [ 1128.441285][ T19] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=31690,uid=0 [ 1128.457964][ T19] Out of memory: Killed process 31690 (syz-executor.0) total-vm:138256kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1128.639907][ T1] init invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 1128.695894][ T1] CPU: 0 PID: 1 Comm: init Not tainted 5.4.0-rc7+ #0 [ 1128.702608][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.712665][ T1] Call Trace: [ 1128.715955][ T1] dump_stack+0x1fb/0x318 [ 1128.720286][ T1] dump_header+0xd8/0x960 [ 1128.724612][ T1] oom_kill_process+0xcd/0x350 [ 1128.729371][ T1] out_of_memory+0x5fa/0x8b0 [ 1128.733953][ T1] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1128.739526][ T1] __alloc_pages_nodemask+0x39a/0x5d0 [ 1128.744899][ T1] kmem_getpages+0x4d/0xa00 [ 1128.751223][ T1] cache_grow_begin+0x7e/0x2c0 [ 1128.755978][ T1] ? __cpuset_node_allowed+0x195/0x510 [ 1128.761428][ T1] fallback_alloc+0x134/0x1c0 [ 1128.766098][ T1] ____cache_alloc_node+0x22a/0x250 [ 1128.771292][ T1] kmem_cache_alloc+0x163/0x2e0 [ 1128.776217][ T1] ? getname_flags+0xba/0x640 [ 1128.780887][ T1] getname_flags+0xba/0x640 [ 1128.785391][ T1] user_path_at_empty+0x2d/0x50 [ 1128.790239][ T1] __se_sys_newstat+0x4b/0x150 [ 1128.795004][ T1] ? do_user_addr_fault+0x35e/0xaf0 [ 1128.800203][ T1] ? check_preemption_disabled+0xb7/0x2a0 [ 1128.805925][ T1] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1128.811379][ T1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 1128.817094][ T1] ? do_syscall_64+0x1d/0x1c0 [ 1128.821771][ T1] __x64_sys_newstat+0x5b/0x70 [ 1128.826531][ T1] do_syscall_64+0xf7/0x1c0 [ 1128.831035][ T1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1128.836926][ T1] RIP: 0033:0x7f9df5fa9c65 [ 1128.841344][ T1] Code: Bad RIP value. [ 1128.845398][ T1] RSP: 002b:00007ffd57107f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1128.853992][ T1] RAX: ffffffffffffffda RBX: 00007ffd57108160 RCX: 00007f9df5fa9c65 [ 1128.861957][ T1] RDX: 00007ffd57108160 RSI: 00007ffd57108160 RDI: 0000000000407545 [ 1128.869931][ T1] RBP: 0000000000000000 R08: 0000000001260240 R09: 0000000000000001 [ 1128.877899][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1128.885865][ T1] R13: 00007ffd57108660 R14: 0000000000000000 R15: 0000000000000000 [ 1129.064193][ T1] Mem-Info: [ 1129.067367][ T1] active_anon:1384196 inactive_anon:493 isolated_anon:0 [ 1129.067367][ T1] active_file:172 inactive_file:139 isolated_file:32 [ 1129.067367][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1129.067367][ T1] slab_reclaimable:13679 slab_unreclaimable:98358 [ 1129.067367][ T1] mapped:52546 shmem:633 pagetables:10527 bounce:0 [ 1129.067367][ T1] free:24979 free_pcp:168 free_cma:0 [ 1129.169019][ T1] Node 0 active_anon:1845196kB inactive_anon:1968kB active_file:596kB inactive_file:496kB unevictable:0kB isolated(anon):0kB isolated(file):244kB mapped:210184kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 403456kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1129.204057][ T1] Node 1 active_anon:3691588kB inactive_anon:4kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.244083][ T1] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.307548][ T1] lowmem_reserve[]: 0 2567 2568 2568 [ 1129.312960][ T1] Node 0 DMA32 free:35928kB min:36352kB low:45440kB high:54528kB active_anon:1838236kB inactive_anon:1968kB active_file:644kB inactive_file:404kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14336kB pagetables:22232kB bounce:0kB free_pcp:1084kB local_pcp:440kB free_cma:0kB [ 1129.366445][ T1] lowmem_reserve[]: 0 0 1 1 [ 1129.371146][ T1] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.564684][ T1] lowmem_reserve[]: 0 0 0 0 [ 1129.607542][ T1] Node 1 Normal free:53316kB min:53516kB low:66892kB high:80268kB active_anon:3691588kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19696kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1129.637003][ T1] lowmem_reserve[]: 0 0 0 0 [ 1130.079572][ T1] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1130.216080][ T1] Node 0 DMA32: 487*4kB (UE) 1993*8kB (UEH) 57*16kB (U) 8*32kB (U) 1*64kB (U) 10*128kB (UME) 8*256kB (E) 2*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 2*4096kB (M) = 36788kB [ 1130.523665][ T1] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1130.663667][ T1] Node 1 Normal: 332*4kB (UME) 45*8kB (UME) 12*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53560kB [ 1132.268176][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.282472][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.295036][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1132.306021][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1132.794279][ T1] 691 total pagecache pages [ 1132.815010][ T1] 0 pages in swap cache [ 1132.835118][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 1132.852330][ T1] Free swap = 0kB [ 1132.856091][ T1] Total swap = 0kB [ 1132.876711][ T1] 1965979 pages RAM [ 1132.886673][ T1] 0 pages HighMem/MovableOnly [ 1132.936540][ T1] 336047 pages reserved [ 1132.969156][ T1] 0 pages cma reserved [ 1132.973282][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=31103,uid=0 [ 1133.035077][ T1] Out of memory: Killed process 31103 (syz-executor.0) total-vm:138256kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1133.745308][ T2965] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1133.838809][ T2965] CPU: 0 PID: 2965 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1133.845877][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.855936][ T2965] Call Trace: [ 1133.859228][ T2965] dump_stack+0x1fb/0x318 [ 1133.863566][ T2965] dump_header+0xd8/0x960 [ 1133.867905][ T2965] oom_kill_process+0xcd/0x350 [ 1133.872666][ T2965] out_of_memory+0x5fa/0x8b0 [ 1133.877262][ T2965] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1133.882829][ T2965] __alloc_pages_nodemask+0x39a/0x5d0 [ 1133.888214][ T2965] alloc_pages_vma+0x4f7/0xd50 [ 1133.892982][ T2965] handle_mm_fault+0x30af/0x5ff0 [ 1133.897938][ T2965] do_user_addr_fault+0x589/0xaf0 [ 1133.902967][ T2965] __do_page_fault+0xd3/0x1f0 [ 1133.907637][ T2965] do_page_fault+0x99/0xb0 [ 1133.912051][ T2965] page_fault+0x39/0x40 [ 1133.916204][ T2965] RIP: 0033:0x7f9275bf5c0e [ 1133.920619][ T2965] Code: Bad RIP value. [ 1133.924674][ T2965] RSP: 002b:00007ffef194e810 EFLAGS: 00010246 [ 1133.930732][ T2965] RAX: 0000000000000000 RBX: 00007f9274884f10 RCX: 0000000000000002 [ 1133.938740][ T2965] RDX: 0000000000011a30 RSI: 0000000000011a40 RDI: 00007f9274885000 [ 1133.946701][ T2965] RBP: 0000000001cddeb0 R08: 0000000000000000 R09: 0000000001cde116 [ 1133.954664][ T2965] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1133.962626][ T2965] R13: 00000000000007ff R14: 0000000001cde320 R15: 0000000001cde0e6 [ 1134.863633][ T2965] Mem-Info: [ 1134.866809][ T2965] active_anon:1384782 inactive_anon:493 isolated_anon:0 [ 1134.866809][ T2965] active_file:49 inactive_file:89 isolated_file:11 [ 1134.866809][ T2965] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1134.866809][ T2965] slab_reclaimable:13680 slab_unreclaimable:98159 [ 1134.866809][ T2965] mapped:52327 shmem:633 pagetables:10468 bounce:0 [ 1134.866809][ T2965] free:24982 free_pcp:81 free_cma:0 [ 1134.921186][ T2965] Node 0 active_anon:1847276kB inactive_anon:1968kB active_file:300kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:209308kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 395264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1134.954616][ T2965] Node 1 active_anon:3691852kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.088193][ T2965] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.161828][ T2965] lowmem_reserve[]: 0 2567 2568 2568 [ 1135.167159][ T2965] Node 0 DMA32 free:36160kB min:36352kB low:45440kB high:54528kB active_anon:1841100kB inactive_anon:1968kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14272kB pagetables:22056kB bounce:0kB free_pcp:628kB local_pcp:176kB free_cma:0kB [ 1135.650627][ T2965] lowmem_reserve[]: 0 0 1 1 [ 1135.655194][ T2965] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.747367][ T2965] lowmem_reserve[]: 0 0 0 0 [ 1135.756608][ T2965] Node 1 Normal free:53296kB min:53516kB low:66892kB high:80268kB active_anon:3691852kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.799331][ T2965] lowmem_reserve[]: 0 0 0 0 [ 1135.803869][ T2965] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1135.889068][ T2965] Node 0 DMA32: 539*4kB (UME) 2014*8kB (UMEH) 59*16kB (UM) 10*32kB (UM) 2*64kB (UM) 10*128kB (UME) 8*256kB (E) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 2*4096kB (M) = 36300kB [ 1135.925317][ T2965] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1136.566431][ T2965] Node 1 Normal: 272*4kB (UME) 42*8kB (UME) 12*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53296kB [ 1136.705817][ T2965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1136.922074][ T2965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1136.944218][ T2965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1136.973761][ T2965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1136.986093][ T2965] 866 total pagecache pages [ 1137.015424][ T2965] 0 pages in swap cache [ 1137.024967][ T2965] Swap cache stats: add 0, delete 0, find 0/0 [ 1137.066366][ T2965] Free swap = 0kB [ 1137.103593][ T2965] Total swap = 0kB [ 1137.107351][ T2965] 1965979 pages RAM [ 1137.131407][ T2965] 0 pages HighMem/MovableOnly [ 1137.136120][ T2965] 336047 pages reserved [ 1137.147286][ T2965] 0 pages cma reserved [ 1137.152104][ T2965] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=29895,uid=0 [ 1137.176834][ T2965] Out of memory: Killed process 29895 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1137.336643][ T3404] blkid invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=-1000 [ 1137.432441][ T3404] CPU: 1 PID: 3404 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1137.440467][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.450611][ T3404] Call Trace: [ 1137.453908][ T3404] dump_stack+0x1fb/0x318 [ 1137.458246][ T3404] dump_header+0xd8/0x960 [ 1137.462582][ T3404] oom_kill_process+0xcd/0x350 [ 1137.467342][ T3404] out_of_memory+0x5fa/0x8b0 [ 1137.471933][ T3404] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1137.477503][ T3404] __alloc_pages_nodemask+0x39a/0x5d0 [ 1137.482871][ T3404] kmem_getpages+0x4d/0xa00 [ 1137.487350][ T3404] cache_grow_begin+0x7e/0x2c0 [ 1137.492132][ T3404] ? __cpuset_node_allowed+0x195/0x510 [ 1137.497567][ T3404] fallback_alloc+0x134/0x1c0 [ 1137.502270][ T3404] ____cache_alloc_node+0x22a/0x250 [ 1137.507447][ T3404] kmem_cache_alloc+0x163/0x2e0 [ 1137.512275][ T3404] ? getname_flags+0xba/0x640 [ 1137.516926][ T3404] getname_flags+0xba/0x640 [ 1137.521403][ T3404] getname+0x19/0x20 [ 1137.525270][ T3404] do_sys_open+0x261/0x560 [ 1137.529662][ T3404] __x64_sys_open+0x87/0x90 [ 1137.534137][ T3404] do_syscall_64+0xf7/0x1c0 [ 1137.538617][ T3404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1137.544481][ T3404] RIP: 0033:0x7fd8cae0d120 [ 1137.548890][ T3404] Code: Bad RIP value. [ 1137.552942][ T3404] RSP: 002b:00007ffef90fd558 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1137.561441][ T3404] RAX: ffffffffffffffda RBX: 00007ffef90fe5a0 RCX: 00007fd8cae0d120 [ 1137.569476][ T3404] RDX: 00007ffef90fd576 RSI: 0000000000000000 RDI: 00007ffef90fd560 [ 1137.577468][ T3404] RBP: 00000000000103b7 R08: 0000000000000000 R09: 0000000000000001 [ 1137.585421][ T3404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef90ff618 [ 1137.593372][ T3404] R13: 0000000000000000 R14: 00007fd8cb2ee820 R15: 00007fd8cb0e42a2 [ 1137.785610][ T3404] Mem-Info: [ 1138.384101][ T3404] active_anon:1384593 inactive_anon:493 isolated_anon:0 [ 1138.384101][ T3404] active_file:41 inactive_file:202 isolated_file:29 [ 1138.384101][ T3404] unevictable:0 dirty:2 writeback:2 unstable:0 [ 1138.384101][ T3404] slab_reclaimable:13681 slab_unreclaimable:98143 [ 1138.384101][ T3404] mapped:52418 shmem:633 pagetables:10440 bounce:0 [ 1138.384101][ T3404] free:24948 free_pcp:70 free_cma:0 [ 1138.544735][ T3404] Node 0 active_anon:1846520kB inactive_anon:1968kB active_file:552kB inactive_file:600kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:209768kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1138.665805][ T3404] Node 1 active_anon:3691852kB inactive_anon:4kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1138.699306][ T3404] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.937754][ T3404] lowmem_reserve[]: 0 2567 2568 2568 [ 1138.948794][ T3404] Node 0 DMA32 free:36528kB min:36352kB low:45440kB high:54528kB active_anon:1840348kB inactive_anon:1968kB active_file:252kB inactive_file:812kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14240kB pagetables:21944kB bounce:0kB free_pcp:444kB local_pcp:220kB free_cma:0kB [ 1139.057287][ T3404] lowmem_reserve[]: 0 0 1 1 [ 1139.061892][ T3404] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.090066][ T3404] lowmem_reserve[]: 0 0 0 0 [ 1139.094589][ T3404] Node 1 Normal free:53296kB min:53516kB low:66892kB high:80268kB active_anon:3691852kB inactive_anon:4kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1139.294899][ T3404] lowmem_reserve[]: 0 0 0 0 [ 1139.379372][ T3404] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1139.430191][ T3404] Node 0 DMA32: 548*4kB (UME) 2014*8kB (UEH) 58*16kB (UM) 11*32kB (UM) 1*64kB (U) 9*128kB (UE) 8*256kB (E) 1*512kB (U) 2*1024kB (UM) 1*2048kB (E) 2*4096kB (M) = 35648kB [ 1139.490354][ T3404] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1139.546930][ T3404] Node 1 Normal: 272*4kB (UME) 42*8kB (UME) 12*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53296kB [ 1139.597138][ T3404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.610695][ T3404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1139.620908][ T3404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.631332][ T3404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1139.652308][ T3404] 712 total pagecache pages [ 1139.656833][ T3404] 0 pages in swap cache [ 1139.714979][ T3404] Swap cache stats: add 0, delete 0, find 0/0 [ 1140.071213][ T3404] Free swap = 0kB [ 1140.074978][ T3404] Total swap = 0kB [ 1140.098791][ T3404] 1965979 pages RAM [ 1140.102634][ T3404] 0 pages HighMem/MovableOnly [ 1140.107300][ T3404] 336047 pages reserved [ 1140.294401][ T3404] 0 pages cma reserved [ 1140.882278][ T3404] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=29545,uid=0 [ 1141.022084][ T3404] Out of memory: Killed process 29545 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1141.440567][ T2929] blkid invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1141.665218][ T2929] CPU: 1 PID: 2929 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1141.672285][ T2929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.682339][ T2929] Call Trace: [ 1141.685636][ T2929] dump_stack+0x1fb/0x318 [ 1141.689970][ T2929] dump_header+0xd8/0x960 [ 1141.694300][ T2929] oom_kill_process+0xcd/0x350 [ 1141.699068][ T2929] out_of_memory+0x5fa/0x8b0 [ 1141.703665][ T2929] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1141.709240][ T2929] __alloc_pages_nodemask+0x39a/0x5d0 [ 1141.714620][ T2929] alloc_pages_current+0x2db/0x500 [ 1141.719740][ T2929] __page_cache_alloc+0x7d/0x1e0 [ 1141.724769][ T2929] pagecache_get_page+0x1f1/0xa40 [ 1141.729802][ T2929] filemap_fault+0x15a9/0x1c60 [ 1141.734576][ T2929] ext4_filemap_fault+0x86/0xa0 [ 1141.739767][ T2929] __do_fault+0x144/0x3d0 [ 1141.744111][ T2929] handle_mm_fault+0x42f1/0x5ff0 [ 1141.749065][ T2929] do_user_addr_fault+0x589/0xaf0 [ 1141.754115][ T2929] __do_page_fault+0xd3/0x1f0 [ 1141.758788][ T2929] do_page_fault+0x99/0xb0 [ 1141.763196][ T2929] page_fault+0x39/0x40 [ 1141.767341][ T2929] RIP: 0033:0x7f76349d1ab0 [ 1141.771760][ T2929] Code: Bad RIP value. [ 1141.775838][ T2929] RSP: 002b:00007ffeaaffdb48 EFLAGS: 00010206 [ 1141.781908][ T2929] RAX: 0000000000000081 RBX: 0000000000000000 RCX: 00000000000007ff [ 1141.789875][ T2929] RDX: 000000000000fb40 RSI: 0000000000fb6000 RDI: 00007f76327e8010 [ 1141.797842][ T2929] RBP: 0000000001e32eb0 R08: 0000000000000000 R09: 0000000001e33116 [ 1141.805817][ T2929] R10: 0000000000000001 R11: 000000000000000a R12: 000000000000000a [ 1141.813779][ T2929] R13: 00000000000007ff R14: 0000000001e33320 R15: 0000000001e330e6 [ 1142.072354][ T2929] Mem-Info: [ 1142.075539][ T2929] active_anon:1384457 inactive_anon:493 isolated_anon:0 [ 1142.075539][ T2929] active_file:13 inactive_file:47 isolated_file:28 [ 1142.075539][ T2929] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1142.075539][ T2929] slab_reclaimable:13685 slab_unreclaimable:98156 [ 1142.075539][ T2929] mapped:52267 shmem:633 pagetables:10413 bounce:0 [ 1142.075539][ T2929] free:24860 free_pcp:618 free_cma:0 [ 1142.246078][ T2929] Node 0 active_anon:1847376kB inactive_anon:1968kB active_file:0kB inactive_file:604kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:209368kB dirty:16kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 387072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1143.641305][ T2929] Node 1 active_anon:3691852kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.730105][ T2929] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.771873][ T2929] lowmem_reserve[]: 0 2567 2568 2568 [ 1143.777195][ T2929] Node 0 DMA32 free:36432kB min:36352kB low:45440kB high:54528kB active_anon:1841308kB inactive_anon:1968kB active_file:24kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14208kB pagetables:21836kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 1144.984525][ T2929] lowmem_reserve[]: 0 0 1 1 [ 1144.995011][ T2929] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1145.396066][ T2929] lowmem_reserve[]: 0 0 0 0 [ 1146.671890][ T2929] Node 1 Normal free:53296kB min:53516kB low:66892kB high:80268kB active_anon:3691852kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19692kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1152.207076][ T2929] lowmem_reserve[]: 0 0 0 0 [ 1152.303494][ T2929] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1156.028506][ T2929] Node 0 DMA32: 606*4kB (UME) 2020*8kB (UMEH) 57*16kB (UM) 12*32kB (UM) 2*64kB (UM) 9*128kB (UE) 9*256kB (ME) 1*512kB (U) 2*1024kB (UM) 1*2048kB (E) 2*4096kB (M) = 36264kB [ 1159.336468][ T2929] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1161.650864][ T2929] Node 1 Normal: 271*4kB (UME) 43*8kB (UME) 12*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53300kB [ 1165.276497][ T2929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.586264][ T2929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.945945][ T2929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1169.059552][ T2929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1170.677425][ T2929] 690 total pagecache pages [ 1171.906469][ T2929] 0 pages in swap cache [ 1172.816507][ T2929] Swap cache stats: add 0, delete 0, find 0/0 [ 1174.248078][ T2929] Free swap = 0kB [ 1174.251844][ T2929] Total swap = 0kB [ 1174.255560][ T2929] 1965979 pages RAM [ 1176.906593][ T2929] 0 pages HighMem/MovableOnly [ 1177.265804][ T2929] 336047 pages reserved [ 1177.969812][ T2929] 0 pages cma reserved [ 1177.973932][ T2929] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=29184,uid=0 [ 1180.674188][ T2929] Out of memory: Killed process 29184 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1182.100434][ T8315] udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1182.218000][ T8315] CPU: 0 PID: 8315 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1182.225057][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.235105][ T8315] Call Trace: [ 1182.238395][ T8315] dump_stack+0x1fb/0x318 [ 1182.242742][ T8315] dump_header+0xd8/0x960 [ 1182.247069][ T8315] oom_kill_process+0xcd/0x350 [ 1182.251838][ T8315] out_of_memory+0x5fa/0x8b0 [ 1182.256430][ T8315] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1182.262001][ T8315] __alloc_pages_nodemask+0x39a/0x5d0 [ 1182.267380][ T8315] alloc_pages_current+0x2db/0x500 [ 1182.272491][ T8315] __page_cache_alloc+0x7d/0x1e0 [ 1182.277455][ T8315] pagecache_get_page+0x1f1/0xa40 [ 1182.282476][ T8315] filemap_fault+0x15a9/0x1c60 [ 1182.287246][ T8315] ext4_filemap_fault+0x86/0xa0 [ 1182.292091][ T8315] __do_fault+0x144/0x3d0 [ 1182.296413][ T8315] handle_mm_fault+0x42f1/0x5ff0 [ 1182.301366][ T8315] do_user_addr_fault+0x589/0xaf0 [ 1182.306841][ T8315] __do_page_fault+0xd3/0x1f0 [ 1182.311517][ T8315] do_page_fault+0x99/0xb0 [ 1182.315927][ T8315] page_fault+0x39/0x40 [ 1182.320074][ T8315] RIP: 0033:0x40745c [ 1182.323967][ T8315] Code: Bad RIP value. [ 1182.328027][ T8315] RSP: 002b:00007fff4b18c920 EFLAGS: 00010217 [ 1182.334082][ T8315] RAX: 0000000000000000 RBX: 0000000002034250 RCX: 00007f84ae0f2943 [ 1182.342042][ T8315] RDX: 0000000000000004 RSI: 00007fff4b18c9e0 RDI: 0000000000000007 [ 1182.350004][ T8315] RBP: 0000000000625500 R08: 00007fff4b18c900 R09: 00007fff4b1b20b8 [ 1182.357981][ T8315] R10: 000000000000ee42 R11: 0000000000000246 R12: 0000000002044fe0 [ 1182.365944][ T8315] R13: 00007fff4b18da37 R14: 0000000000000005 R15: 0000000002034250 [ 1185.406875][ T8315] Mem-Info: [ 1185.416325][ T8315] active_anon:1385321 inactive_anon:493 isolated_anon:0 [ 1185.416325][ T8315] active_file:34 inactive_file:25 isolated_file:56 [ 1185.416325][ T8315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1185.416325][ T8315] slab_reclaimable:13686 slab_unreclaimable:97734 [ 1185.416325][ T8315] mapped:52279 shmem:633 pagetables:10389 bounce:0 [ 1185.416325][ T8315] free:24944 free_pcp:27 free_cma:0 [ 1185.501743][ T8315] Node 0 active_anon:1849448kB inactive_anon:1968kB active_file:152kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):164kB mapped:209148kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1187.306151][ T8315] Node 1 active_anon:3691852kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1187.465187][ T8315] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.513846][ T8315] lowmem_reserve[]: 0 2567 2568 2568 [ 1187.535090][ T8315] Node 0 DMA32 free:35640kB min:36352kB low:45440kB high:54528kB active_anon:1843684kB inactive_anon:1968kB active_file:104kB inactive_file:372kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14112kB pagetables:21748kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1187.582671][ T8315] lowmem_reserve[]: 0 0 1 1 [ 1187.587226][ T8315] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.718340][ T8315] lowmem_reserve[]: 0 0 0 0 [ 1188.722902][ T8315] Node 1 Normal free:53300kB min:53516kB low:66892kB high:80268kB active_anon:3691852kB inactive_anon:4kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1190.421054][ T8315] lowmem_reserve[]: 0 0 0 0 [ 1190.425616][ T8315] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1191.544641][ T8315] Node 0 DMA32: 601*4kB (UME) 2235*8kB (UEH) 71*16kB (UMH) 19*32kB (UM) 3*64kB (UM) 10*128kB (UME) 8*256kB (E) 1*512kB (U) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 36300kB [ 1192.311357][ T8315] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1193.687305][ T8315] Node 1 Normal: 271*4kB (UME) 43*8kB (UME) 12*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53300kB [ 1194.412563][ T8315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1194.434582][ T8315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1195.749474][ T8315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1195.796334][ T8315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1195.903985][ T8315] 838 total pagecache pages [ 1195.916869][ T8315] 0 pages in swap cache [ 1195.933712][ T8315] Swap cache stats: add 0, delete 0, find 0/0 [ 1196.066617][ T8315] Free swap = 0kB [ 1196.134285][ T8315] Total swap = 0kB [ 1197.306194][ T8315] 1965979 pages RAM [ 1197.346044][ T8315] 0 pages HighMem/MovableOnly [ 1197.543605][ T8315] 336047 pages reserved [ 1197.643280][ T8315] 0 pages cma reserved [ 1197.647396][ T8315] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=25998,uid=0 [ 1197.669419][ T8315] Out of memory: Killed process 25998 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1199.570410][ T2510] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1199.706853][ T2510] CPU: 1 PID: 2510 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1199.713919][ T2510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.723975][ T2510] Call Trace: [ 1199.727288][ T2510] dump_stack+0x1fb/0x318 [ 1199.731620][ T2510] dump_header+0xd8/0x960 [ 1199.735946][ T2510] oom_kill_process+0xcd/0x350 [ 1199.740715][ T2510] out_of_memory+0x5fa/0x8b0 [ 1199.745324][ T2510] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1199.750901][ T2510] __alloc_pages_nodemask+0x39a/0x5d0 [ 1199.756279][ T2510] alloc_pages_vma+0x4f7/0xd50 [ 1199.761044][ T2510] handle_mm_fault+0x30af/0x5ff0 [ 1199.765999][ T2510] do_user_addr_fault+0x589/0xaf0 [ 1199.771035][ T2510] __do_page_fault+0xd3/0x1f0 [ 1199.775735][ T2510] do_page_fault+0x99/0xb0 [ 1199.780151][ T2510] page_fault+0x39/0x40 [ 1199.784300][ T2510] RIP: 0033:0x7f5091126c0e [ 1199.788720][ T2510] Code: Bad RIP value. [ 1199.792780][ T2510] RSP: 002b:00007fff850e2040 EFLAGS: 00010246 [ 1199.798836][ T2510] RAX: 0000000000000000 RBX: 00007f50907cbf10 RCX: 0000000000000002 [ 1199.806804][ T2510] RDX: 000000000001bb90 RSI: 000000000001bba0 RDI: 00007f50907cc000 [ 1199.814778][ T2510] RBP: 000000000069feb0 R08: 0000000000000000 R09: 00000000006a0116 [ 1199.822747][ T2510] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1199.830713][ T2510] R13: 00000000000007ff R14: 00000000006a0320 R15: 00000000006a00e6 [ 1200.598930][ T2510] Mem-Info: [ 1200.602113][ T2510] active_anon:1384774 inactive_anon:493 isolated_anon:0 [ 1200.602113][ T2510] active_file:6 inactive_file:244 isolated_file:113 [ 1200.602113][ T2510] unevictable:0 dirty:32 writeback:50 unstable:0 [ 1200.602113][ T2510] slab_reclaimable:13725 slab_unreclaimable:97719 [ 1200.602113][ T2510] mapped:52450 shmem:633 pagetables:10388 bounce:0 [ 1200.602113][ T2510] free:25067 free_pcp:250 free_cma:0 [ 1200.842436][ T2510] Node 0 active_anon:1848144kB inactive_anon:1968kB active_file:48kB inactive_file:920kB unevictable:0kB isolated(anon):0kB isolated(file):328kB mapped:209800kB dirty:28kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 356352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1200.985328][ T2510] Node 1 active_anon:3691752kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.030462][ T2510] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.122336][ T2510] lowmem_reserve[]: 0 2567 2568 2568 [ 1201.127726][ T2510] Node 0 DMA32 free:36340kB min:36352kB low:45440kB high:54528kB active_anon:1841572kB inactive_anon:1968kB active_file:0kB inactive_file:1072kB unevictable:0kB writepending:328kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14144kB pagetables:21828kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1201.324628][ T2510] lowmem_reserve[]: 0 0 1 1 [ 1201.334636][ T2510] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.424494][ T2510] lowmem_reserve[]: 0 0 0 0 [ 1202.209801][ T2510] Node 1 Normal free:53512kB min:53516kB low:66892kB high:80268kB active_anon:3691752kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.759179][ T2510] lowmem_reserve[]: 0 0 0 0 [ 1202.763741][ T2510] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1202.866587][ T2510] Node 0 DMA32: 427*4kB (UME) 2194*8kB (UEH) 76*16kB (UH) 14*32kB (UM) 2*64kB (UM) 10*128kB (UME) 9*256kB (ME) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 35900kB [ 1202.911847][ T2510] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1202.976294][ T2510] Node 1 Normal: 306*4kB (UME) 50*8kB (UME) 13*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53512kB [ 1203.009058][ T2510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.024181][ T2510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1203.053018][ T2510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.076464][ T2510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1203.102794][ T2510] 743 total pagecache pages [ 1203.107329][ T2510] 0 pages in swap cache [ 1203.132243][ T2510] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.086386][ T2510] Free swap = 0kB [ 1204.091552][ T2510] Total swap = 0kB [ 1204.095276][ T2510] 1965979 pages RAM [ 1204.100312][ T2510] 0 pages HighMem/MovableOnly [ 1204.105071][ T2510] 336047 pages reserved [ 1204.113983][ T2510] 0 pages cma reserved [ 1204.157264][ T2510] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=25086,uid=0 [ 1204.234261][ T2510] Out of memory: Killed process 25086 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1204.299275][ T1071] oom_reaper: reaped process 25086 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1204.914156][ T2824] udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1205.832000][ T2824] CPU: 0 PID: 2824 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1205.839073][ T2824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.849127][ T2824] Call Trace: [ 1205.852418][ T2824] dump_stack+0x1fb/0x318 [ 1205.856749][ T2824] dump_header+0xd8/0x960 [ 1205.861079][ T2824] oom_kill_process+0xcd/0x350 [ 1205.865844][ T2824] out_of_memory+0x5fa/0x8b0 [ 1205.870435][ T2824] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1205.876005][ T2824] __alloc_pages_nodemask+0x39a/0x5d0 [ 1205.881389][ T2824] alloc_pages_current+0x2db/0x500 [ 1205.886501][ T2824] __page_cache_alloc+0x7d/0x1e0 [ 1205.891435][ T2824] pagecache_get_page+0x1f1/0xa40 [ 1205.896463][ T2824] filemap_fault+0x15a9/0x1c60 [ 1205.901232][ T2824] ext4_filemap_fault+0x86/0xa0 [ 1205.906079][ T2824] __do_fault+0x144/0x3d0 [ 1205.910410][ T2824] handle_mm_fault+0x42f1/0x5ff0 [ 1205.915363][ T2824] do_user_addr_fault+0x589/0xaf0 [ 1205.920396][ T2824] __do_page_fault+0xd3/0x1f0 [ 1205.925066][ T2824] do_page_fault+0x99/0xb0 [ 1205.929482][ T2824] page_fault+0x39/0x40 [ 1205.933630][ T2824] RIP: 0033:0x7f84ae07ec68 [ 1205.938052][ T2824] Code: Bad RIP value. [ 1205.942109][ T2824] RSP: 002b:00007fff4b18c6f0 EFLAGS: 00010206 [ 1205.948166][ T2824] RAX: 000000000204d4a0 RBX: 00007fff4b18c7d8 RCX: 000000000204d490 [ 1205.956129][ T2824] RDX: 00007f84ae39ce40 RSI: 0000000000000258 RDI: 00007f84ae39ce40 [ 1205.964095][ T2824] RBP: 00007fff4b18c7e0 R08: 000000000204d490 R09: 000000000041c5e9 [ 1205.972060][ T2824] R10: 0000000000000000 R11: 00007f84ae0ee3a0 R12: 0000000000000001 [ 1205.980021][ T2824] R13: 0000000000000016 R14: ffffffffffffff00 R15: 00007fff4b18c848 [ 1207.772065][ T2824] Mem-Info: [ 1207.775250][ T2824] active_anon:1385305 inactive_anon:493 isolated_anon:0 [ 1207.775250][ T2824] active_file:4 inactive_file:19 isolated_file:47 [ 1207.775250][ T2824] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1207.775250][ T2824] slab_reclaimable:13727 slab_unreclaimable:97759 [ 1207.775250][ T2824] mapped:52258 shmem:633 pagetables:10364 bounce:0 [ 1207.775250][ T2824] free:24940 free_pcp:209 free_cma:0 [ 1208.972885][ T2824] Node 0 active_anon:1849468kB inactive_anon:1968kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:208904kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1209.871729][ T2824] Node 1 active_anon:3691752kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1209.936350][ T2824] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1209.971761][ T2824] lowmem_reserve[]: 0 2567 2568 2568 [ 1209.977100][ T2824] Node 0 DMA32 free:36152kB min:36352kB low:45440kB high:54528kB active_anon:1843320kB inactive_anon:1968kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14112kB pagetables:21732kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1210.676862][ T2824] lowmem_reserve[]: 0 0 1 1 [ 1210.703356][ T2824] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.375032][ T2824] lowmem_reserve[]: 0 0 0 0 [ 1211.380719][ T2824] Node 1 Normal free:53512kB min:53516kB low:66892kB high:80268kB active_anon:3691752kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.457100][ T2824] lowmem_reserve[]: 0 0 0 0 [ 1213.634183][ T2824] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1213.992838][ T2824] Node 0 DMA32: 528*4kB (UME) 2195*8kB (UMEH) 83*16kB (UMH) 19*32kB (UM) 2*64kB (UM) 10*128kB (UME) 8*256kB (E) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 36328kB [ 1214.023437][ T2824] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1215.584449][ T2824] Node 1 Normal: 306*4kB (UME) 50*8kB (UME) 13*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53512kB [ 1216.658667][ T2824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.675065][ T2824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1216.747326][ T2824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1217.861050][ T2824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1217.924995][ T2824] 672 total pagecache pages [ 1217.965629][ T2824] 0 pages in swap cache [ 1217.973723][ T2824] Swap cache stats: add 0, delete 0, find 0/0 [ 1218.100751][ T2824] Free swap = 0kB [ 1218.104513][ T2824] Total swap = 0kB [ 1218.115007][ T2824] 1965979 pages RAM [ 1219.153830][ T2824] 0 pages HighMem/MovableOnly [ 1220.327656][ T2824] 336047 pages reserved [ 1220.331851][ T2824] 0 pages cma reserved [ 1220.335909][ T2824] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=24096,uid=0 [ 1220.666664][ T2824] Out of memory: Killed process 24096 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1220.933742][ T3389] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1222.025971][ T3389] CPU: 1 PID: 3389 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1222.033049][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1222.043113][ T3389] Call Trace: [ 1222.046406][ T3389] dump_stack+0x1fb/0x318 [ 1222.050744][ T3389] dump_header+0xd8/0x960 [ 1222.055072][ T3389] oom_kill_process+0xcd/0x350 [ 1222.059834][ T3389] out_of_memory+0x5fa/0x8b0 [ 1222.064425][ T3389] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1222.069996][ T3389] __alloc_pages_nodemask+0x39a/0x5d0 [ 1222.075369][ T3389] alloc_pages_vma+0x4f7/0xd50 [ 1222.080132][ T3389] handle_mm_fault+0x30af/0x5ff0 [ 1222.085092][ T3389] do_user_addr_fault+0x589/0xaf0 [ 1222.090128][ T3389] __do_page_fault+0xd3/0x1f0 [ 1222.095152][ T3389] do_page_fault+0x99/0xb0 [ 1222.099568][ T3389] page_fault+0x39/0x40 [ 1222.103721][ T3389] RIP: 0033:0x7fb94e544c0e [ 1222.108144][ T3389] Code: Bad RIP value. [ 1222.112204][ T3389] RSP: 002b:00007ffd3f924340 EFLAGS: 00010246 [ 1222.118261][ T3389] RAX: 0000000000000000 RBX: 00007fb94ddecf10 RCX: 0000000000000002 [ 1222.126225][ T3389] RDX: 00000000000023f0 RSI: 0000000000002400 RDI: 00007fb94dded000 [ 1222.134194][ T3389] RBP: 0000000002227eb0 R08: 0000000000000000 R09: 0000000002228116 [ 1222.142167][ T3389] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1222.150130][ T3389] R13: 00000000000007ff R14: 0000000002228320 R15: 00000000022280e6 [ 1223.312724][ T3389] Mem-Info: [ 1223.316174][ T3389] active_anon:1385249 inactive_anon:493 isolated_anon:0 [ 1223.316174][ T3389] active_file:68 inactive_file:39 isolated_file:21 [ 1223.316174][ T3389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1223.316174][ T3389] slab_reclaimable:13729 slab_unreclaimable:97754 [ 1223.316174][ T3389] mapped:52304 shmem:633 pagetables:10338 bounce:0 [ 1223.316174][ T3389] free:25004 free_pcp:13 free_cma:0 [ 1223.706546][ T3389] Node 0 active_anon:1849312kB inactive_anon:1968kB active_file:252kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:209060kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1223.756216][ T3389] Node 1 active_anon:3691752kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1223.878579][ T3389] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1223.906199][ T3389] lowmem_reserve[]: 0 2567 2568 2568 [ 1224.948211][ T3389] Node 0 DMA32 free:36232kB min:36352kB low:45440kB high:54528kB active_anon:1843144kB inactive_anon:1968kB active_file:96kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14112kB pagetables:21628kB bounce:0kB free_pcp:492kB local_pcp:492kB free_cma:0kB [ 1225.034826][ T3389] lowmem_reserve[]: 0 0 1 1 [ 1225.043422][ T3389] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1225.283366][ T3389] lowmem_reserve[]: 0 0 0 0 [ 1225.662953][ T3389] Node 1 Normal free:53512kB min:53516kB low:66892kB high:80268kB active_anon:3691752kB inactive_anon:4kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1226.606531][ T3389] lowmem_reserve[]: 0 0 0 0 [ 1226.614666][ T3389] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1227.536801][ T3389] Node 0 DMA32: 458*4kB (UE) 2198*8kB (UMEH) 83*16kB (UMH) 19*32kB (UM) 2*64kB (UM) 9*128kB (UE) 9*256kB (ME) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 36200kB [ 1228.907323][ T3389] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1230.302447][ T3389] Node 1 Normal: 306*4kB (UME) 50*8kB (UME) 13*16kB (UME) 7*32kB (UME) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53512kB [ 1230.334123][ T3389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1230.356691][ T3389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1230.442861][ T3389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1230.478927][ T3389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1230.536106][ T3389] 672 total pagecache pages [ 1230.599144][ T3389] 0 pages in swap cache [ 1230.603399][ T3389] Swap cache stats: add 0, delete 0, find 0/0 [ 1231.746147][ T3389] Free swap = 0kB [ 1231.987491][ T3389] Total swap = 0kB [ 1231.991258][ T3389] 1965979 pages RAM [ 1231.995070][ T3389] 0 pages HighMem/MovableOnly [ 1233.497282][ T3389] 336047 pages reserved [ 1233.581360][ T3389] 0 pages cma reserved [ 1233.585473][ T3389] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=23146,uid=0 [ 1233.618657][ T3389] Out of memory: Killed process 23146 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1234.766031][ T3260] blkid invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=-1000 [ 1235.773303][ T3260] CPU: 1 PID: 3260 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1235.780466][ T3260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.790518][ T3260] Call Trace: [ 1235.793809][ T3260] dump_stack+0x1fb/0x318 [ 1235.798139][ T3260] dump_header+0xd8/0x960 [ 1235.802469][ T3260] oom_kill_process+0xcd/0x350 [ 1235.807339][ T3260] out_of_memory+0x5fa/0x8b0 [ 1235.811941][ T3260] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1235.817512][ T3260] __alloc_pages_nodemask+0x39a/0x5d0 [ 1235.822895][ T3260] alloc_pages_vma+0x4f7/0xd50 [ 1235.827665][ T3260] handle_mm_fault+0x30af/0x5ff0 [ 1235.832618][ T3260] do_user_addr_fault+0x589/0xaf0 [ 1235.837654][ T3260] __do_page_fault+0xd3/0x1f0 [ 1235.842330][ T3260] do_page_fault+0x99/0xb0 [ 1235.846745][ T3260] page_fault+0x39/0x40 [ 1235.850894][ T3260] RIP: 0033:0x7f5f73b83c0e [ 1235.855305][ T3260] Code: Bad RIP value. [ 1235.859361][ T3260] RSP: 002b:00007ffef97afae0 EFLAGS: 00010246 [ 1235.865414][ T3260] RAX: 0000000000000000 RBX: 00007f5f73139f10 RCX: 0000000000000002 [ 1235.873461][ T3260] RDX: 000000000000b150 RSI: 000000000000b160 RDI: 00007f5f7313a000 [ 1235.881421][ T3260] RBP: 000000000135deb0 R08: 0000000000000000 R09: 000000000135e116 [ 1235.889380][ T3260] R10: 0000000000000001 R11: 0000000000000100 R12: 000000000000000a [ 1235.897343][ T3260] R13: 00000000000007ff R14: 000000000135e320 R15: 000000000135e0e6 [ 1236.723489][ T3260] Mem-Info: [ 1236.726740][ T3260] active_anon:1385358 inactive_anon:493 isolated_anon:0 [ 1236.726740][ T3260] active_file:55 inactive_file:7 isolated_file:0 [ 1236.726740][ T3260] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1236.726740][ T3260] slab_reclaimable:13729 slab_unreclaimable:97786 [ 1236.726740][ T3260] mapped:52250 shmem:633 pagetables:10312 bounce:0 [ 1236.726740][ T3260] free:24840 free_pcp:122 free_cma:0 [ 1237.879168][ T3260] Node 0 active_anon:1849544kB inactive_anon:1968kB active_file:96kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:209016kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1240.673074][ T3260] Node 1 active_anon:3692000kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.109031][ T3260] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.966151][ T3260] lowmem_reserve[]: 0 2567 2568 2568 [ 1245.973341][ T3260] Node 0 DMA32 free:36188kB min:36352kB low:45440kB high:54528kB active_anon:1843436kB inactive_anon:1968kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14048kB pagetables:21548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.109675][ T3260] lowmem_reserve[]: 0 0 1 1 [ 1246.114235][ T3260] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.262911][ T3260] lowmem_reserve[]: 0 0 0 0 [ 1247.666145][ T3260] Node 1 Normal free:53288kB min:53516kB low:66892kB high:80268kB active_anon:3692000kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.896094][ T3260] lowmem_reserve[]: 0 0 0 0 [ 1252.604274][ T3260] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1254.744571][ T3260] Node 0 DMA32: 325*4kB (UMEH) 2199*8kB (UMEH) 81*16kB (UMH) 14*32kB (U) 2*64kB (UM) 10*128kB (UME) 9*256kB (ME) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 35612kB [ 1257.651804][ T3260] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1259.110973][ T3260] Node 1 Normal: 292*4kB (UE) 37*8kB (UE) 11*16kB (UE) 6*32kB (UE) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53288kB [ 1261.955523][ T3260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.091639][ T3260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.258323][ T3260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.543530][ T3260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.555694][ T3260] 696 total pagecache pages [ 1263.563101][ T3260] 0 pages in swap cache [ 1263.567259][ T3260] Swap cache stats: add 0, delete 0, find 0/0 [ 1263.707928][ T3260] Free swap = 0kB [ 1263.711681][ T3260] Total swap = 0kB [ 1263.715393][ T3260] 1965979 pages RAM [ 1263.724514][ T3260] 0 pages HighMem/MovableOnly [ 1264.732344][ T3260] 336047 pages reserved [ 1264.736556][ T3260] 0 pages cma reserved [ 1264.763011][ T3260] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=22436,uid=0 [ 1264.838383][ T3260] Out of memory: Killed process 22436 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1265.250105][ T3170] udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1265.376211][ T3170] CPU: 0 PID: 3170 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1265.383359][ T3170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.393412][ T3170] Call Trace: [ 1265.396719][ T3170] dump_stack+0x1fb/0x318 [ 1265.401050][ T3170] dump_header+0xd8/0x960 [ 1265.405377][ T3170] oom_kill_process+0xcd/0x350 [ 1265.410141][ T3170] out_of_memory+0x5fa/0x8b0 [ 1265.414734][ T3170] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1265.420306][ T3170] __alloc_pages_nodemask+0x39a/0x5d0 [ 1265.425681][ T3170] alloc_pages_current+0x2db/0x500 [ 1265.430814][ T3170] __page_cache_alloc+0x7d/0x1e0 [ 1265.435745][ T3170] pagecache_get_page+0x1f1/0xa40 [ 1265.440769][ T3170] filemap_fault+0x15a9/0x1c60 [ 1265.445553][ T3170] ext4_filemap_fault+0x86/0xa0 [ 1265.450491][ T3170] __do_fault+0x144/0x3d0 [ 1265.454818][ T3170] handle_mm_fault+0x42f1/0x5ff0 [ 1265.459778][ T3170] do_user_addr_fault+0x589/0xaf0 [ 1265.464815][ T3170] __do_page_fault+0xd3/0x1f0 [ 1265.469484][ T3170] do_page_fault+0x99/0xb0 [ 1265.473894][ T3170] page_fault+0x39/0x40 [ 1265.478056][ T3170] RIP: 0033:0x40745c [ 1265.481950][ T3170] Code: Bad RIP value. [ 1265.486004][ T3170] RSP: 002b:00007fff4b18c920 EFLAGS: 00010217 [ 1265.492058][ T3170] RAX: 0000000000000000 RBX: 0000000002034250 RCX: 00007f84ae0f2943 [ 1265.500018][ T3170] RDX: 0000000000000004 RSI: 00007fff4b18c9e0 RDI: 0000000000000007 [ 1265.507978][ T3170] RBP: 0000000000625500 R08: 00007fff4b18c900 R09: 00007fff4b1b20b8 [ 1265.515937][ T3170] R10: 000000000000e87c R11: 0000000000000246 R12: 000000000204d090 [ 1265.523898][ T3170] R13: 00007fff4b18da37 R14: 0000000000000005 R15: 0000000002034250 [ 1266.205521][ T3170] Mem-Info: [ 1266.285783][ T3170] active_anon:1385460 inactive_anon:493 isolated_anon:0 [ 1266.285783][ T3170] active_file:51 inactive_file:30 isolated_file:33 [ 1266.285783][ T3170] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1266.285783][ T3170] slab_reclaimable:13729 slab_unreclaimable:97645 [ 1266.285783][ T3170] mapped:52278 shmem:633 pagetables:10281 bounce:0 [ 1266.285783][ T3170] free:24938 free_pcp:0 free_cma:0 [ 1266.415172][ T3170] Node 0 active_anon:1849888kB inactive_anon:1968kB active_file:80kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:209112kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 339968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1266.446942][ T3170] Node 1 active_anon:3691952kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.717338][ T3170] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.841918][ T3170] lowmem_reserve[]: 0 2567 2568 2568 [ 1267.847283][ T3170] Node 0 DMA32 free:35984kB min:36352kB low:45440kB high:54528kB active_anon:1843732kB inactive_anon:1968kB active_file:432kB inactive_file:228kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:14016kB pagetables:21452kB bounce:0kB free_pcp:880kB local_pcp:572kB free_cma:0kB [ 1268.185308][ T3170] lowmem_reserve[]: 0 0 1 1 [ 1268.195967][ T3170] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.319414][ T3170] lowmem_reserve[]: 0 0 0 0 [ 1268.323977][ T3170] Node 1 Normal free:53364kB min:53516kB low:66892kB high:80268kB active_anon:3691952kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1270.686625][ T3170] lowmem_reserve[]: 0 0 0 0 [ 1270.842477][ T3170] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1272.356482][ T3170] Node 0 DMA32: 494*4kB (UME) 2299*8kB (UMEH) 92*16kB (UMH) 18*32kB (UM) 4*64kB (UM) 9*128kB (UE) 8*256kB (E) 1*512kB (U) 2*1024kB (UM) 2*2048kB (ME) 1*4096kB (M) = 36624kB [ 1272.385569][ T3170] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1273.386199][ T3170] Node 1 Normal: 307*4kB (UME) 39*8kB (UME) 11*16kB (UE) 6*32kB (UE) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53364kB [ 1274.895027][ T3170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.915804][ T3170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.909258][ T3170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1276.186809][ T3170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1276.207088][ T3170] 672 total pagecache pages [ 1276.273533][ T3170] 0 pages in swap cache [ 1277.807495][ T3170] Swap cache stats: add 0, delete 0, find 0/0 [ 1277.813599][ T3170] Free swap = 0kB [ 1277.817306][ T3170] Total swap = 0kB [ 1277.966497][ T3170] 1965979 pages RAM [ 1277.983457][ T3170] 0 pages HighMem/MovableOnly [ 1278.004002][ T3170] 336047 pages reserved [ 1278.027167][ T3170] 0 pages cma reserved [ 1278.085279][ T3170] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=22078,uid=0 [ 1278.174062][ T3170] Out of memory: Killed process 22078 (syz-executor.3) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1278.470242][ T2837] udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1279.445276][ T2837] CPU: 0 PID: 2837 Comm: udevd Not tainted 5.4.0-rc7+ #0 [ 1279.452343][ T2837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.462397][ T2837] Call Trace: [ 1279.465688][ T2837] dump_stack+0x1fb/0x318 [ 1279.470021][ T2837] dump_header+0xd8/0x960 [ 1279.474353][ T2837] oom_kill_process+0xcd/0x350 [ 1279.479113][ T2837] out_of_memory+0x5fa/0x8b0 [ 1279.483701][ T2837] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1279.489271][ T2837] __alloc_pages_nodemask+0x39a/0x5d0 [ 1279.494645][ T2837] alloc_pages_current+0x2db/0x500 [ 1279.499752][ T2837] __page_cache_alloc+0x7d/0x1e0 [ 1279.504683][ T2837] pagecache_get_page+0x1f1/0xa40 [ 1279.509704][ T2837] filemap_fault+0x15a9/0x1c60 [ 1279.514487][ T2837] ext4_filemap_fault+0x86/0xa0 [ 1279.519348][ T2837] __do_fault+0x144/0x3d0 [ 1279.523684][ T2837] handle_mm_fault+0x42f1/0x5ff0 [ 1279.528640][ T2837] do_user_addr_fault+0x589/0xaf0 [ 1279.533669][ T2837] __do_page_fault+0xd3/0x1f0 [ 1279.538342][ T2837] do_page_fault+0x99/0xb0 [ 1279.542759][ T2837] page_fault+0x39/0x40 [ 1279.546904][ T2837] RIP: 0033:0x7f84ae07b4f0 [ 1279.551319][ T2837] Code: Bad RIP value. [ 1279.555393][ T2837] RSP: 002b:00007fff4b18c588 EFLAGS: 00010246 [ 1279.561454][ T2837] RAX: 0000000000000000 RBX: 00007f84ae163aa4 RCX: 00656d69746c6163 [ 1279.569422][ T2837] RDX: 0000000000000000 RSI: 00007f84ae161fc0 RDI: 00007f84ae163aa4 [ 1279.577394][ T2837] RBP: 00007fff4b18c6d0 R08: 000000000211fc80 R09: 0000000000000001 [ 1279.585358][ T2837] R10: 0000000000000000 R11: 00007f84ae096c95 R12: 0000000000000000 [ 1279.593323][ T2837] R13: 0000000000000000 R14: 000000000000002f R15: 00007fff4b18c848 [ 1279.731666][ T2837] Mem-Info: [ 1279.734852][ T2837] active_anon:1385705 inactive_anon:493 isolated_anon:0 [ 1279.734852][ T2837] active_file:42 inactive_file:63 isolated_file:28 [ 1279.734852][ T2837] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1279.734852][ T2837] slab_reclaimable:13727 slab_unreclaimable:97437 [ 1279.734852][ T2837] mapped:52295 shmem:633 pagetables:10255 bounce:0 [ 1279.734852][ T2837] free:25017 free_pcp:61 free_cma:0 [ 1282.562428][ T2837] Node 0 active_anon:1850924kB inactive_anon:1968kB active_file:60kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:209084kB dirty:0kB writeback:0kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1282.674993][ T2837] Node 1 active_anon:3691952kB inactive_anon:4kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.867006][ T2837] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.977884][ T2837] lowmem_reserve[]: 0 2567 2568 2568 [ 1283.983216][ T2837] Node 0 DMA32 free:36264kB min:36352kB low:45440kB high:54528kB active_anon:1844748kB inactive_anon:1968kB active_file:88kB inactive_file:164kB unevictable:0kB writepending:0kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:13920kB pagetables:21344kB bounce:0kB free_pcp:808kB local_pcp:148kB free_cma:0kB [ 1284.037380][ T2837] lowmem_reserve[]: 0 0 1 1 [ 1284.076212][ T2837] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.535901][ T2837] lowmem_reserve[]: 0 0 0 0 [ 1286.625404][ T2837] Node 1 Normal free:53364kB min:53516kB low:66892kB high:80268kB active_anon:3691952kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.756569][ T2837] lowmem_reserve[]: 0 0 0 0 [ 1286.761217][ T2837] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1286.895828][ T2837] Node 0 DMA32: 366*4kB (UME) 2411*8kB (UMEH) 96*16kB (UMH) 16*32kB (U) 2*64kB (U) 9*128kB (UE) 9*256kB (ME) 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 1*4096kB (M) = 36112kB [ 1287.187858][ T1063] INFO: task udevd:1859 blocked for more than 143 seconds. [ 1287.195091][ T1063] Not tainted 5.4.0-rc7+ #0 [ 1287.785521][ T2837] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1287.912830][ T1063] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1287.945650][ T2837] Node 1 Normal: 307*4kB (UME) 39*8kB (UME) 11*16kB (UE) 6*32kB (UE) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53364kB [ 1288.077736][ T2837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.087323][ T2837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.147083][ T1063] udevd D24704 1859 3905 0x00004000 [ 1288.166831][ T2837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.247088][ T1063] Call Trace: [ 1288.256733][ T2837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.294909][ T1063] __schedule+0x7b7/0xc30 [ 1288.323730][ T1063] schedule+0x131/0x1e0 [ 1288.327977][ T1063] schedule_preempt_disabled+0x13/0x20 [ 1288.333433][ T1063] __mutex_lock_common+0x1411/0x2e20 [ 1288.346240][ T1063] ? process_measurement+0x666/0x1800 [ 1288.346297][ T2837] 705 total pagecache pages [ 1288.353596][ T1063] mutex_lock_nested+0x1b/0x30 [ 1288.366332][ T2837] 0 pages in swap cache [ 1289.294743][ T1063] process_measurement+0x666/0x1800 [ 1289.298071][ T2837] Swap cache stats: add 0, delete 0, find 0/0 [ 1289.306142][ T2837] Free swap = 0kB [ 1289.395485][ T1063] ? generic_file_open+0x8c/0xc0 [ 1289.415877][ T1063] ? rcu_lock_release+0x9/0x30 [ 1289.436804][ T1063] ? rcu_lock_release+0x26/0x30 [ 1289.556552][ T2837] Total swap = 0kB [ 1289.585935][ T2837] 1965979 pages RAM [ 1289.597080][ T1063] ? smk_of_task_struct+0x1c5/0x1d0 [ 1289.751868][ T2837] 0 pages HighMem/MovableOnly [ 1289.756576][ T2837] 336047 pages reserved [ 1291.097612][ T2837] 0 pages cma reserved [ 1291.101839][ T2837] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=20290,uid=0 [ 1291.765909][ T1063] ? smack_task_getsecid+0x26/0x90 [ 1292.033755][ T1063] ima_file_check+0x9b/0xe0 [ 1292.093560][ T2837] Out of memory: Killed process 20290 (syz-executor.4) total-vm:138256kB, anon-rss:4284kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:147456kB oom_score_adj:1000 [ 1292.115571][ T1071] oom_reaper: reaped process 20290 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1292.149056][ T1063] path_openat+0x1760/0x4420 [ 1292.182718][ T1063] do_filp_open+0x192/0x3d0 [ 1292.302180][ T1063] do_sys_open+0x29f/0x560 [ 1292.306642][ T1063] __x64_sys_open+0x87/0x90 [ 1292.347502][ T1063] do_syscall_64+0xf7/0x1c0 [ 1292.352047][ T1063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.367893][ T1063] RIP: 0033:0x7f84ae0e6120 [ 1292.372362][ T1063] Code: Bad RIP value. [ 1292.376419][ T1063] RSP: 002b:00007fff4b18c4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1292.394875][ T2541] blkid invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 1292.409600][ T1063] RAX: ffffffffffffffda RBX: 0000000002042d80 RCX: 00007f84ae0e6120 [ 1292.433950][ T2541] CPU: 0 PID: 2541 Comm: blkid Not tainted 5.4.0-rc7+ #0 [ 1292.441003][ T2541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.451054][ T2541] Call Trace: [ 1292.454339][ T2541] dump_stack+0x1fb/0x318 [ 1292.458675][ T2541] dump_header+0xd8/0x960 [ 1292.462999][ T2541] oom_kill_process+0xcd/0x350 [ 1292.467758][ T2541] out_of_memory+0x5fa/0x8b0 [ 1292.472342][ T2541] __alloc_pages_slowpath+0x1ce3/0x2680 [ 1292.477903][ T2541] __alloc_pages_nodemask+0x39a/0x5d0 [ 1292.483275][ T2541] alloc_pages_current+0x2db/0x500 [ 1292.488382][ T2541] __page_cache_alloc+0x7d/0x1e0 [ 1292.493313][ T2541] pagecache_get_page+0x1f1/0xa40 [ 1292.498338][ T2541] filemap_fault+0x15a9/0x1c60 [ 1292.503110][ T2541] ext4_filemap_fault+0x86/0xa0 [ 1292.507957][ T2541] __do_fault+0x144/0x3d0 [ 1292.512369][ T2541] handle_mm_fault+0x42f1/0x5ff0 [ 1292.517324][ T2541] do_user_addr_fault+0x589/0xaf0 [ 1292.522355][ T2541] __do_page_fault+0xd3/0x1f0 [ 1292.527026][ T2541] do_page_fault+0x99/0xb0 [ 1292.531442][ T2541] page_fault+0x39/0x40 [ 1292.535282][ T1063] RDX: 00000000000001b6 RSI: 0000000000000000 RDI: 00007f84ae163aa4 [ 1292.535577][ T2541] RIP: 0033:0x7f51dae6eb20 [ 1292.535616][ T2541] Code: Bad RIP value. [ 1292.552025][ T2541] RSP: 002b:00007ffefb035508 EFLAGS: 00010206 [ 1292.558079][ T2541] RAX: 0000000000000000 RBX: 0000000001c0d000 RCX: 0000000000000001 [ 1292.566215][ T2541] RDX: 0000000001c0d000 RSI: 0000000001c0b000 RDI: 00007f51d8c22000 [ 1292.574177][ T2541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000001a64116 [ 1292.582143][ T2541] R10: 0000000000000001 R11: 000000000000000a R12: 0000000001c0b000 [ 1292.583814][ T1063] RBP: 00007fff4b18c550 R08: 0000000000000008 R09: 0000000000000001 [ 1292.590098][ T2541] R13: 00007f51d8c22000 R14: fffffffffffff000 R15: 0000000001c0c010 [ 1292.617106][ T2541] Mem-Info: [ 1292.620303][ T2541] active_anon:1385557 inactive_anon:493 isolated_anon:0 [ 1292.620303][ T2541] active_file:8 inactive_file:158 isolated_file:62 [ 1292.620303][ T2541] unevictable:0 dirty:3 writeback:1 unstable:0 [ 1292.620303][ T2541] slab_reclaimable:13718 slab_unreclaimable:97443 [ 1292.620303][ T2541] mapped:52375 shmem:633 pagetables:10227 bounce:0 [ 1292.620303][ T2541] free:24976 free_pcp:254 free_cma:0 [ 1292.657869][ T2541] Node 0 active_anon:1850300kB inactive_anon:1968kB active_file:132kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:209400kB dirty:12kB writeback:4kB shmem:2524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 331776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1292.686807][ T2541] Node 1 active_anon:3691928kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1292.687487][ T1063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1292.723449][ T2541] Node 0 DMA free:10464kB min:216kB low:268kB high:320kB active_anon:4840kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.770487][ T2541] lowmem_reserve[]: 0 2567 2568 2568 [ 1292.775823][ T2541] Node 0 DMA32 free:36044kB min:36352kB low:45440kB high:54528kB active_anon:1843828kB inactive_anon:1968kB active_file:476kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:13920kB pagetables:21236kB bounce:0kB free_pcp:1652kB local_pcp:252kB free_cma:0kB [ 1292.811606][ T2541] lowmem_reserve[]: 0 0 1 1 [ 1292.816095][ T1063] R13: 00007f84ae161fc0 R14: 000000000000002f R15: 00007fff4b18c848 [ 1292.816141][ T2541] Node 0 Normal free:8kB min:16kB low:20kB high:24kB active_anon:1336kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.825759][ T1063] INFO: task udevd:2088 blocked for more than 149 seconds. [ 1292.921322][ T2541] lowmem_reserve[]: 0 0 0 0 [ 1292.925883][ T2541] Node 1 Normal free:53388kB min:53516kB low:66892kB high:80268kB active_anon:3691928kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:7328kB pagetables:19552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.937475][ T1063] Not tainted 5.4.0-rc7+ #0 [ 1292.967013][ T1063] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1292.969033][ T2541] lowmem_reserve[]: 0 0 0 0 [ 1292.975746][ T1063] udevd D26936 2088 3905 0x00004000 [ 1292.986515][ T1063] Call Trace: [ 1292.997232][ T1063] __schedule+0x7b7/0xc30 [ 1293.041050][ T1063] schedule+0x131/0x1e0 [ 1293.045295][ T1063] schedule_preempt_disabled+0x13/0x20 [ 1293.060466][ T1063] __mutex_lock_common+0x1411/0x2e20 [ 1293.065779][ T1063] ? process_measurement+0x666/0x1800 [ 1293.071238][ T1063] mutex_lock_nested+0x1b/0x30 [ 1293.076567][ T1063] process_measurement+0x666/0x1800 [ 1293.078128][ T2541] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 2*16kB (ME) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 1293.082695][ T1063] ? generic_file_open+0x8c/0xc0 [ 1293.823104][ T1063] ? rcu_lock_release+0x9/0x30 [ 1293.825697][ T2541] Node 0 DMA32: 447*4kB (UME) 2407*8kB (UMEH) 97*16kB (UMH) 18*32kB (UM) 4*64kB (UM) 10*128kB (UME) 9*256kB (ME) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 1*4096kB (M) = 36228kB [ 1293.836488][ T1063] ? rcu_lock_release+0x26/0x30 [ 1293.959710][ T1063] ? smk_of_task_struct+0x1c5/0x1d0 [ 1293.964966][ T1063] ? smack_task_getsecid+0x26/0x90 [ 1294.106815][ T1063] ima_file_check+0x9b/0xe0 [ 1294.227669][ T2541] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1294.298175][ T1063] path_openat+0x1760/0x4420 [ 1294.302857][ T1063] do_filp_open+0x192/0x3d0 [ 1294.307372][ T1063] do_sys_open+0x29f/0x560 [ 1294.323417][ T1063] __x64_sys_open+0x87/0x90 [ 1294.453488][ T1063] do_syscall_64+0xf7/0x1c0 [ 1294.468222][ T1063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.474139][ T1063] RIP: 0033:0x7f84ae0e6120 [ 1295.556795][ T2541] Node 1 Normal: 311*4kB (UME) 40*8kB (UME) 11*16kB (UE) 6*32kB (UE) 2*64kB (UM) 3*128kB (ME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 11*4096kB (M) = 53388kB [ 1295.655191][ T1063] Code: Bad RIP value. [ 1295.673601][ T2541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.694980][ T1063] RSP: 002b:00007fff4b18c4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1295.696394][ T2541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.724783][ T2541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.652453][ T2541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1296.671208][ T1063] RAX: ffffffffffffffda RBX: 0000000002039790 RCX: 00007f84ae0e6120 [ 1296.681784][ T2541] 747 total pagecache pages [ 1296.686291][ T2541] 0 pages in swap cache [ 1296.694853][ T1063] RDX: 00000000000001b6 RSI: 0000000000000000 RDI: 00007f84ae163aa4 [ 1296.791633][ T2541] Swap cache stats: add 0, delete 0, find 0/0 [ 1296.811858][ T1063] RBP: 00007fff4b18c550 R08: 0000000000000008 R09: 0000000000000001 [ 1296.824002][ T2541] Free swap = 0kB [ 1296.932230][ T1063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1296.956670][ T2541] Total swap = 0kB [ 1296.963046][ T1063] R13: 00007f84ae161fc0 R14: 000000000000002f R15: 00007fff4b18c848 [ 1297.078983][ T1063] INFO: task udevd:2114 blocked for more than 153 seconds. [ 1297.086206][ T1063] Not tainted 5.4.0-rc7+ #0 [ 1297.135722][ T2541] 1965979 pages RAM